newbee-mall vulnerabilities

2 known vulnerabilities in newbee-mall from Newbee-ltd. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  newbee-mall: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2026-26219Feb 12, 2026Newbee-ltd

  newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not incorporate per-user salts or computational cost controls, enabling attackers who obtain password hashes through database exposure, backup leaka

• 9.8 Critical severity

  newbee-mall: Use of Hard-coded Credentials

  CVE-2026-26218Feb 12, 2026Newbee-ltd

  newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned with a predictable default password. Deployments that initialize or reset the database using the provided schema and fail to change the