CVE-2026-30777: Medium severity EC-CUBE CO.,LTD. EC-CUBE vulnerability
EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-30777?
CVE-2026-30777 has been classified as a high-severity vulnerability due to the potential for unauthorized access to administrative functionalities.
How do I fix CVE-2026-30777?
To fix CVE-2026-30777, it is recommended to update to the latest version of EC-CUBE provided by EC-CUBE CO.,LTD. that addresses this vulnerability.
What systems are affected by CVE-2026-30777?
CVE-2026-30777 affects installations of EC-CUBE software that utilize multi-factor authentication.
Can CVE-2026-30777 be exploited by anyone?
Yes, CVE-2026-30777 can be exploited by attackers who have already obtained a valid administrator ID and password.
What is the risk associated with CVE-2026-30777?
The risk associated with CVE-2026-30777 includes potential unauthorized administrative access, which can lead to data breaches and loss of control over the EC-CUBE system.