CVE-2025-26244

Business logic

Overview

Description
-

Social media

Hype score
Not currently trending

  1. DeimosC2 — Multi-protocol Golang C2 framework 🔥 ✔ TCP ✔ HTTPS ✔ DoH ✔ QUIC ✔ Pivoting Architecture breakdown, agent ops, automation, detection strategies & CVE-2025-26244 security analysis. Educational deep dive. Blog link 👇 https://t.co/YWcwyzSARx #Cyber

    @chandrusecurity

    26 Feb 2026

    58 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. Google Pixel Improper Authorization Vulnerability•CVE-2026-58704
  2. A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to obtain elevated privileges and modify settings beyond what is authorized by the user's existing privilege level on a vulnerable system.•CVE-2026-73708
  3. A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request.•CVE-2026-78618
  4. A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.•CVE-2026-79406
  5. Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's POST /{_locale}/update-payment payment webhook accepts attacker-controlled id and orderId parameters but does not verify that the Mollie payment belongs to the referenced Sylius order, allowing an unauthenticated attacker with any valid paid Mollie payment ID to mark a victim order as paid without transferring funds for that order. This issue is fixed in 2.2.8, 3.2.4, and 3.3.1.•CVE-2026-68500

References

Sources include official advisories and independent security research.