Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Saleor is an e-commerce platform. From 2.10.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, a business-logic and authorization flaw was found in the account email change workflow, the confirmation flow did not verify that the email change confirmation token was issued for the given authenticated user. As a result, a valid email-change token generated for one account can be replayed while authenticated as a different account. The second account’s email address is then updated to the token's new_email, even though that token was never issued for that account. This vulnerability is fixed in 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-35407 Authorization Flaw in Saleor Email Change Confirmation Token Validation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35407
Post summary
CVE-2026-35407 is disclosed as an authorization flaw affecting Saleor’s email change confirmation token validation.
CVE-2026-35407 Saleor is an e-commerce platform. From 2.10.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, a business-logic and authorization flaw was found in the account ema… https://www.cve.org/CVERecord?id=CVE-2026-35407
Post summary
The post announces that CVE-2026-35407 is a business‑logic and authorization flaw affecting specific Saleor e‑commerce platform versions, linking to the CVE record for further details.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | saleor | saleor | - | - | - |
| App | saleor | saleor | 3.23.0 | - | - |
| App | saleor | saleor | 3.23.0 | - | - |
| App | saleor | saleor | 3.23.0 | - | - |
| App | saleor | saleor | 3.23.0 | - | - |