Newbee-Ltd
4 CVEs across 2 Newbee-Ltd products. Browse Newbee-Ltd vulnerabilities, severities, and proof-of-concept exploits.
Newbee-Ltd products with known CVEs
Newbee-Ltd CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-2658 | Medium | 4.3 | 2026-02-18 | A vulnerability was found in newbee-ltd newbee-mall up to a069069b07027613bf0e7f571736be86f431faee. Affected is an unknown function of the component Multiple E… |
CVE-2026-26219 | Critical | 9.1 | 2026-02-12 | newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not incorporate per-user salts or computational… |
CVE-2026-26218 | Critical | 9.8 | 2026-02-12 | newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned with a predictable default passwor… |
CVE-2025-15360 | Medium | 4.7 | 2025-12-30 | A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the file src/main/java/ltd/newbee/mall/controller/common/UploadCo… |