Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times. This vulnerability is fixed in 8.2.4 and 9.0.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-06 | 1 | Disclosure1 |
| 2026-02-11 | 1 | General1 |
Got new CVE CVE-2026-25597!!! XD You can find more details here: https://lnkd.in/gc86ffZx https://lnkd.in/gugbH8qN
Post summary
The post announces a new CVE and provides links for further information, but offers no additional details, PoC, or actionable content.
CVE-2026-25597 PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-based user enumeration vulnerability in the user authentication fun… https://www.cve.org/CVERecord?id=CVE-2026-25597
Post summary
PrestaShop CVE‑2026‑25597 is a time‑based user enumeration vulnerability in the authentication function, fixed in releases 8.2.4 and 9.0.3; no PoC, exploit code, or active exploitation is reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | prestashop | prestashop | - | - | - |