Advisories · Technology

CoCart.

Every CVE that names CoCart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93549 CVE record

CVSS 8.8 High

CoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication Bypass
- CoCart
- Cross-site request forgery (CSRF)
Not analysed yet 4 Oct 2026
CVE-2026-10524 CVE record

CVSS 7.5 High

CoCart < 4.9.0 - Unauthenticated Arbitrary Price Manipulation
- CoCart
- CWE-472
Not analysed yet 6 Aug 2026