CVE-2026-94590: CODEPEOPLE2 Sell Downloads

Medium severity, CVSS 6.5.

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3.

Affected products

• CODEPEOPLE2 Sell Downloads: up to and including 1.2.3

Published 2026-10-10. Last modified 2026-10-10.