V6
Product
v6
by cubecart · last CVE Sep 17, 2026
20
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 11Low 0
Watch

Add v6 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45714
9.1
0%
May 13
CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE
Affected: < 6.7.0
CVE-2026-45053
9.1
1%
May 13
CubeCart: Authenticated Arbitrary File Upload to RCE in REST Files API
Affected: < 6.7.0
CVE-2026-44377
9.1
1%
May 13
CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE
Affected: < 6.7.0
Showing 3