[ CVEs ]

ALL VULNS

Every vulnerability we have found and reported. 32 CVEs across 3 products plus 1 security advisory. 18 rated Critical.

CVEs

Advisories

Critical

Products

ADOBE WRITEUP →NEXUS SSRF WRITEUP →WOOCOMMERCE WRITEUP →

CVE	Product	CWE	CVSS	Severity	Researcher
CVE-2026-14646	Nexus Repository Manager 3	CWE-918	4.9	Medium	@e0x1337
CVE-2026-48351	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-48352	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-48354	Content Credentials SDK	CWE-190	6.2	Important	@bau1u
CVE-2026-48296	Content Credentials SDK	CWE-191	6.2	Important	@bau1u
CVE-2026-48302	Content Credentials SDK	CWE-20	6.2	Important	@bau1u
CVE-2026-48353	Content Credentials SDK	CWE-20	5.5	Important	@bau1u
CVE-2026-34648	Adobe Commerce	CWE-400	7.5	Critical	@bau1u, @e0x1337
CVE-2026-34649	Adobe Commerce	CWE-400	7.5	Critical	@bau1u, @e0x1337
CVE-2026-34650	Adobe Commerce	CWE-400	7.5	Critical	@bau1u, @e0x1337
CVE-2026-34651	Adobe Commerce	CWE-400	7.5	Critical	@bau1u, @e0x1337
CVE-2026-34657	Content Credentials SDK	CWE-22	5.5	Important	@m411
CVE-2026-34712	Content Credentials SDK	CWE-400	7.5	Critical	@bau1u
CVE-2026-34713	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-47902	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-47903	Content Credentials SDK	CWE-190	6.2	Important	@bau1u
CVE-2026-47904	Content Credentials SDK	CWE-191	6.2	Important	@bau1u
CVE-2026-47905	Content Credentials SDK	CWE-20	6.2	Important	@bau1u
CVE-2026-34665	Content Credentials SDK	CWE-400	7.5	Critical	@bau1u
CVE-2026-34666	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-34667	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-34668	Content Credentials SDK	CWE-190	6.2	Important	@bau1u
CVE-2026-34669	Content Credentials SDK	CWE-191	6.2	Important	@bau1u
CVE-2026-34670	Content Credentials SDK	CWE-400	7.5	Critical	@bau1u
CVE-2026-34671	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-34672	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-34673	Content Credentials SDK	CWE-190	6.2	Important	@bau1u
CVE-2026-34677	Content Credentials SDK	CWE-191	6.2	Important	@bau1u
CVE-2026-34678	Content Credentials SDK	CWE-400	7.5	Critical	@bau1u
CVE-2026-34679	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-34680	Content Credentials SDK	CWE-20	7.5	Critical	@bau1u
CVE-2026-34688	Content Credentials SDK	CWE-190	6.2	Important	@bau1u

SECURITY ADVISORIES

Vulnerabilities reported through bug bounty programs that resulted in vendor advisories.

Stripe for WooCommerce Checkout Session Hijack

Stripe for WooCommerce (v10.6.0 to v10.8.3)

8.1HIGH

Full payment bypass via Checkout Session amount overwrite

Business Logic ErrorsHackerOne #3835686July 2026@e0x1337VIEW ADVISORY ↗

READ THE WRITEUP →