CyberSecBulletin

PickMall Lilishop vulnerabilities

We track 1 vulnerability in PickMall Lilishop products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2026.

1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score

Latest PickMall Lilishop vulnerabilities

  • 7.3 High severity

    PickMall Lilishop: Incorrect Privilege Assignment

    CVE-2026-105571PickMall Lilishop

    A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper authorization. It is p