CVE-2026-8771: linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection
A security flaw has been discovered in linlinjava litemall up to 1.8.0. This impacts the function list of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/web/WxGoodsController.java of the component Front-end WeChat API. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8771?
CVE-2026-8771 is classified as a critical vulnerability due to its potential for SQL injection, which can lead to unauthorized access to sensitive data.
How do I fix CVE-2026-8771?
To fix CVE-2026-8771, upgrade to a version of linlinjava litemall higher than 1.8.0 where the vulnerability has been addressed.
What impact does CVE-2026-8771 have on affected systems?
CVE-2026-8771 allows attackers to execute arbitrary SQL queries, potentially compromising the integrity and confidentiality of the database.
Is my version vulnerable to CVE-2026-8771?
If you are using linlinjava litemall version 1.8.0 or earlier, your system is vulnerable to CVE-2026-8771.
What components are affected by CVE-2026-8771?
CVE-2026-8771 specifically affects the WxGoodsController.java component within the linlinjava litemall application.