en
Severity across 4 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 4 vulnerability records affecting MultiVendorX.
Among the 4 records analyzed by CyStack, 1 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-74925MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator | Exploitation statusPublic exploit | FixYes | Published09/11/2026 | SeverityUnknown |
CVE-2026-74927MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST Endpoint | Exploitation statusPublic exploit | FixYes | Published09/02/2026 | SeverityMedium |
CVE-2026-16746MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint | Exploitation statusPublic exploit | FixYes | Published08/05/2026 | SeverityLow |
CVE-2026-16605MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization | Exploitation statusPublic exploit | FixYes | Published08/05/2026 | SeverityHigh |
