What is CVE-2026-19838?
A vulnerability found in Webkul Bagisto up to version 2.4.4, affecting the Backend Reporting Endpoint (/admin/reporting/sales/). It allows authorization bypass and can be exploited remotely. It is strongly recommended to upgrade to the latest version or apply the vendor-provided security patch immediately.
Azərbaycanca: Webkul Bagisto-nun 2.4.4 versiyasına qədər olan Backend Reporting Endpoint (/admin/reporting/sales/) komponentində müəyyən edilmiş zəiflikdir. Bu, autentifikasiya bypass zəifliyi olub, uzaqdan hücuma imkan verir. İstifadəçilərə dərhal ən son versiyaya yeniləmə və ya satıcı tərəfindən təqdim edilən təhlükəsizlik yamasını tətbiq etmələri tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-863; shared vendor: Webkul
FAQ2
Which versions of Webkul Bagisto are affected by CVE-2026-19838?
This vulnerability affects all versions of Webkul Bagisto up to version 2.4.4.
What measure should be taken to protect against CVE-2026-19838?
It is strongly recommended to immediately upgrade to the latest version or apply the security patch provided by the vendor.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.