OS
Product
osCommerce2
by osCommerce · last CVE Oct 5, 2026
2
CVEs
0
On KEV
4.7
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add osCommerce2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105226
4.7
0%
Oct 5
osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
Affected: 2.3.4.0; 2.3.4.1
CVE-2026-105225
4.3
0%
Oct 5
osCommerce osCommerce2 Payment payment.php include code injection
Affected: 2.3.4.0; 2.3.4.1
Showing 2