CVE-2026-111278Published
NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111278 · Microsoft / collected KEV context
cve-program · CVE-2026-111278
- https://github.com/nivocart/nivocart/issues/27
- https://github.com/nivocart/nivocart/blob/5bc2c3fc7caed9846b58959183f8ccf599cd4399/upload/catalog/controller/information/contact.php#L144-L150
- https://github.com/nivocart/nivocart/blob/5bc2c3fc7caed9846b58959183f8ccf599cd4399/upload/catalog/view/theme/default/template/information/contact.tpl#L43
- https://github.com/nivocart/nivocart
- https://www.vulncheck.com/advisories/nivocart-through-2.5.1-captcha-bypass-via-answer-disclosed-in-page-html
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.