Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. This vulnerability affects unknown code of the component OTP Validation. The manipulation results in client-side enforcement of server-side security. The attack may be launched remotely. The exploit is now public and may be used. Upgrading to version v2 is able to resolve this issue. The affected component should be upgraded.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
My first CVE! 🎉 CVE-2026-84110: I discovered an OTP verification bypass in Releasit COD Form & Upsells for Shopify, allowing orders without server-side OTP verification (CWE-602). Thanks to VulDB for assigning the CVE! #CyberSecurity #CVE
Post summary
The user announces discovery of an OTP bypass vulnerability in a Shopify app, providing technical details without mentioning a PoC, patch, or current exploitation.