Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Akilli Commerce E-Commerce Website Session Hijacking Risk

CVE-2026-2347 · published 5 months ago
Summary

A security weakness in Akilli Commerce's E-Commerce Website allows an attacker to access a customer's session, potentially allowing them to make unauthorized purchases or changes. This affects versions of the website prior to 4.5.001. To protect your customers, update to the latest version of the website as soon as possible.

Original advisory text
Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking. This issue affects E-Commerce Website:...
Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Session Hijacking.

This issue affects E-Commerce Website: before 4.5.001.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-639Authorization Bypass Through User-Controlled Key
Timeline
Published14 May 2026
Updated4 Nov 2026
First seen14 May 2026
Sources
CVE-2026-2347 · NVD
Track software like this
Free during beta