CVE-2026-54390
CRITICAL 1 PoC
INFO
Priority: 0.06
BB Relevance:
89/100
Published: 2026-06-18
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
AT:
None
VC:
High
VI:
High
VA:
High
Description
JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can exploit this flaw to read sensitive server-side values such as database credentials and encryption keys, and on versions 5.4.0 through 5.7.1, leverage registered Smarty modifiers including unserialize and file_get_contents to write a webshell to the web root and execute arbitrary commands as the web server user.
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| JTL Software | JTL Shop | 5.2.0 < 5.4.0 |
| JTL Software | JTL Shop | 5.4.0 < 5.5.4 |
| JTL Software | JTL Shop | 5.6.0 < 5.6.2 |
| JTL Software | JTL Shop | 5.7.0 < 5.7.2 |
| JTL Software | JTL Shop | 5.2.0 < 5.4.0 |
| JTL Software | JTL Shop | 5.4.0 < 5.5.4 |
| JTL Software | JTL Shop | 5.6.0 < 5.6.2 |
| JTL Software | JTL Shop | 5.7.0 < 5.7.2 |