This vulnerability (CVE-2026-2347) affects Akilli Commerce Software Technologies Ltd. Co.'s E-Commerce Website prior to version 4.5.001. It is classified as CWE-639, an authorization bypass through a user-controlled key. This weakness allows an attacker to bypass authorization mechanisms, enabling session hijacking and potentially full compromise of user sessions. The CVSS 3.1 base score is 9.8 (critical), reflecting network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not provided a patch or official remediation guidance yet, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to unauthorized access to user sessions, allowing attackers to hijack sessions and potentially perform actions with the privileges of the compromised user. This affects confidentiality, integrity, and availability of the affected e-commerce platform and its users. Given the critical CVSS score, the impact is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider restricting access to the affected versions and monitor for unusual session activity. No vendor-provided mitigation or temporary fix is currently documented.