CVE-2026-84110: Releasit Releasit COD Form & Upsells OTP Validation client-side enforcement of server-side security

Published Sep 1, 2026

Updated

A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. This vulnerability affects unknown code of the component OTP Validation. The manipulation results in client-side enforcement of server-side security. The attack may be launched remotely. The exploit is now public and may be used. Upgrading to version v2 is able to resolve this issue. The affected component should be upgraded.

Affected Software

1 affected component

Releasit Releasit COD Form & Upsells=v1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Releasit Releasit COD Form & Upsells to a version that resolves this vulnerability.
Fixed in v2

Event History

Sep 1, 2026

CVE Published

via MITRE·02:15 PM

Data Sourced

via MITRE·02:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue can be exploited remotely and does not require privileges or user interaction. Public exploit availability increases the likelihood of attempted exploitation.

What is the remediation?

Upgrade Releasit COD Form & Upsells from version 1 to version 2. The available data identifies version 2 as resolving the issue.

What security property is at risk?

The issue affects OTP Validation by enforcing a server-side security control on the client side. The supplied severity vector indicates an integrity impact, with no stated confidentiality or availability impact.