yushine vulnerabilities

Products

• innoshop 1

Latest yushine CVEs

Newest publication first

1. CVE-2026-18959 yushine InnoShop Files Endpoint panel-api.php destroyFiles path traversal

   Published 2026-08-05

   Medium·CVSS 5.3 EPSS 0.54%

   A flaw has been found in yushine InnoShop up to 0.8.2. Affected by this issue is the function FileManagerController::destroyFiles of the file innopacks/restapi/routes/panel-api.php of the component Files Endpoint. This manipulation causes path traversal. The attack may be initiat...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.