← Database

CVE-2026-21719

HIGH CVSS: 7.2 Published: 2026-04-17 Modified: 2026-06-17

Description

An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command.

Affected Platforms

Cubecart Cubecart

Weakness Type

CWE-78

References