High severity7.3NVD Advisory· Published Sep 23, 2026

CVE-2026-96602

Description

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Abdurrab5/online-makeup-storellm-create

Patches

Vulnerability mechanics

References

github.com/yashkeral/cve-writeups/blob/main/online-makeup-store/02-customer-login-sqli.mdnvd
vuldb.com/cve/CVE-2026-96602nvd
vuldb.com/submit/898998nvd
vuldb.com/vuln/408968nvd
vuldb.com/vuln/408968/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000