Threats tagged 'ghsa-4fc9-ww4r-44xr'

A security vulnerability (CVE-2026-19838) exists in Webkul Bagisto versions prior to 2.4.5 affecting the backend reporting endpoint at /admin/reporting/sales/. This vulnerability allows an attacker with some privileges to bypass authorization controls remotely. The vendor has acknowledged the issue and is addressing it through their internal security processes, with some fixes already implemented and others planned for upcoming releases. The vulnerability has a low severity score and no known exploits are currently active in the wild.