CVE-2026-14637Disclosure

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function getCartItems in the library application/libraries/ShoppingCart.php. The manipulation of the argument shopping_cart leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The identifier of the patch is 49b20f53de2b7ec34e920b11c863f1491d911a04. It is recommended to apply a patch to fix this issue.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-04); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-04: 1Mentions · 2026-07-05: 107-0407-05
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-041
Disclosure1
2026-07-051
General1
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-14637 A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the … https://www.cve.org/CVERecord?id=CVE-2026-14637 ----- Traducción: CVE-2026-14637 Se … http://infoflow.cloud`

    Post summary

    The post merely references CVE‑2026‑14637 with links to a CVE record, offering no further technical or exploitation details.

    0000041
    91 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-14637 A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the … https://www.cve.org/CVERecord?id=CVE-2026-14637

    Post summary

    The text announces detection of CVE-2026-14637 in kirilkirkov Ecommerce-CodeIgniter-Bootstrap, pointing to the CVE record for details.

    000002.8K
    57.7K followersView on X

Explore more