CVE-2026-74019: CWE-862 Missing Authorization in paulepro2019 EPROLO Dropshipping

CVE-2026-74019 is a missing authorization vulnerability (CWE-862) affecting EPROLO Dropshipping software versions up to 2.4.2. This flaw allows unauthenticated attackers to bypass access control mechanisms, potentially leading to unauthorized access to sensitive information. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact. No known exploits are reported in the wild, and no vendor patch or advisory details are available.

The vulnerability allows unauthenticated attackers to bypass authorization controls, potentially exposing sensitive data (high confidentiality impact) and causing limited integrity issues. There is no impact on system availability. The attack complexity is low, and no user interaction is required, making exploitation feasible under certain conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific mitigations or workarounds are provided in the available data.