HIGH 8.1 NVD
CVE-2026-79410
Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below
Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods.
References
- https://github.com/isukasanuj/bagisto-cve/blob/main/CVE-2026-79410.md
- https://github.com/isukasanuj/bagisto-cve/blob/main/CVE-2026-79410.md
This high severity vulnerability with a CVSS score of 8.1 was published on 2026-09-15 via NVD.
vulnfeed aggregates 14340 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.