Skip to content

Product

Cradle e-commerce vulnerabilities

1 published CVE affecting Cradle e-commerce, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest Cradle e-commerce CVEs

Newest publication first

  1. CVE-2026-3318 Multiple vulnerabilities in Cradle e-commerce

    Published
    MediumCVSS 5.3 EPSS 0.34%

    Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform. The vulnerability occurs in the login form endpoint, where the ‘returnUrl’ parameter allows redirection because the web application accepts a URL as a parameter without properly validating...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.