VULNERABILITY INTELLIGENCE
CVE-2026-54390
CVSS score9.8 CRITICAL
EPSS probability0.60%
CISA KEVNot currently listed
Published2026-06-18
Last modified2026-10-29
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can exploit this flaw to read sensitive server-side values such as database credentials and encryption keys, and on versions 5.4.0 through 5.7.1, leverage registered Smarty modifiers including unserialize and file_get_contents to write a webshell to the web root and execute arbitrary commands as the web server user.
Weakness classification
- disclosure@vulncheck.com: CWE-1336