CVE-2026-96601: ABDURRAB5 Online-Makeup-Store

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure.

Affected products

Published 2026-09-23. Last modified 2026-09-24.