Live › vulnerability › CVE-2026-111657
Go to dashboardBeikeShop through 2.0.0.31 lets a logged-in customer call the mark-as-shipped endpoint for return requests (RMAs) belonging to other customers by changing the id. An attacker can overwrite courier names and tracking numbers and mark approved returns as shipped.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
BeikeShop installations up to and including 2.0.0.31 that accept customer accounts and use the returns (RMA) feature are exposed. Stores without customer accounts or without returns enabled are not affected by this flaw as described.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsShipped handler of RmaController that allows authenticated customers to modify other customers' returns. Attackers can submit sequential RMA ids to the account/rmas/{id}/mark_as_shipped endpoint to overwrite courier names and tracking numbers and mark approved returns as shipped.
This page as .md · .json · in your agent: get_signal("CVE-2026-111657")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.