← CVE Intelligence

CVE-2026-30777

EC-CUBE CO.,LTD. / EC-CUBE 4.1 series PUBLISHED

Description (CNA)

EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page.

Affected (CNA)

Vendor / productVersions
EC-CUBE CO.,LTD. / EC-CUBE 4.1 seriesaffected prior to 4.1.2-p5
EC-CUBE CO.,LTD. / EC-CUBE 4.2 seriesaffected prior to 4.2.3-p2
EC-CUBE CO.,LTD. / EC-CUBE 4.3 seriesaffected prior to 4.3.1-p1

CWE

CWE-288

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.