Live › vulnerability › CVE-2026-111611
Go to dashboardroncoo-education through 25.0.0-RELEASE lacks an ownership check on its pay cancel and continue endpoints. A logged-in user who supplies another user's order number can close that pending order or read its course ids and prices.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Deployments of roncoo-education through 25.0.0-RELEASE that accept user accounts and take payments for courses. Installations without user accounts or without online orders are unlikely to be exposed. The sources do not name a patched version.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to the pay cancel or continue endpoints to close pending orders or read course ids and prices.
This page as .md · .json · in your agent: get_signal("CVE-2026-111611")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.