CVE-2026-14846: The firmware 8.2.1

CVE-2026-14846. EPSS 0.00425 (percentile 0.35708), scored 24-Oct-2026.

Affected technology

The firmware · 8.2.1
PrestaShop

Description’s affected range: version 8.2.1 of PrestaShop

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · Active user interaction

What an attacker can do

An attacker can inject malicious expressions that are executed when the information is exported using the ‘Get my data in CSV’ tool. Vendor/CNA’s CVSS 4.0 assessment (base score 4.5/10) rates confidentiality, integrity and availability impact as low.

Published 25-Oct-2026 01:31 UTC

CWE: CWE-1236
CCR priority: 0.1 /100 (P5)
EPSS: 0.00425 · percentile 0.35708 · 2026-10-24
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-25 01:28:19.133527+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-14846.html