[ Vendor · 2 CVEs ]
isotope
CVEs affecting isotope published in the last 30 days, plus any isotope CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96599 | 23 Sep 2026 | CVSS 5.9 | isotope-coreIsotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, allowing unauthenticated… | |
| CVE-2026-96600 | 23 Sep 2026 | CVSS 5.5 | isotope-coreIsotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers… |