CVE-2026-103905

{
  "etk_id": "ETK-2026-1561",
  "cve_id": "CVE-2026-103905",
  "display_id": "CVE-2026-103905",
  "ghsa_id": "GHSA-xvw9-2xw4-g33x",
  "euvd_id": "EUVD-2026-100979",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated plugin safe mode toggle in JTL-Shop",
  "summary": "JTL-Shop administration backend authentication handling is affected by an authorization flaw in the plugin safe mode control. An unauthenticated remote attacker can enable or disable plugin safe mode, which can deactivate installed plugins and disrupt functions such as payment and shipping. The issue is reachable through the administration logout route without prior authentication.",
  "mitigation": "Upgrade JTL-Shop to version 5.6.5, 5.7.5, or 5.8.2, as appropriate for the supported release line. Restrict access to the administration backend to trusted networks until the update is applied.",
  "vendor": "JTL-Software GmbH",
  "product": "JTL-Shop",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 5.3.0, < 5.6.5",
        ">= 5.7.0, < 5.7.5",
        ">= 5.8.0, < 5.8.2"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "5.6.5",
        "5.7.5",
        "5.8.2"
      ],
      "package_name": "JTL-Shop",
      "purl": null
    }
  ],
  "cwes": [
    306
  ],
  "cvss_score": 8.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
  "epss_score": 0.0053,
  "epss_percentile": 0.4375,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 96.41325501666667,
  "t0_at": "2026-10-14T10:34:34.610000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-14T10:34:34.610000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-14T10:34:34.610000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103905"
    }
  }
}