Unrated severityNVD Advisory· Published Jul 31, 2026· Updated Aug 3, 2026

CVE-2026-50986

Description

PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Prestashop/mandat-administratifllm-create
Range: <1.8.1
Prestashop/totadministrativemandatellm-fuzzy
Range: <1.8.1

Patches

Vulnerability mechanics

References

addons.prestashop.com/fr/paiement-transfert-bancaire/6297-mandat-administratif.htmlmitre
prestafence.com/en/2026/07/cve-2026-50986-csrf-administrative-mandate/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000