CVE-2026-71809 - Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote unauthenticated attackers to log in as any user, merchant, or administrator

Back Back to CVE browser

HIGH

Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote unauthenticated attackers to log in as any user, merchant, or administrator

Published Sep 9, 2026

8.1

HIGH

CVSS 3.1

EPSS 0.59%

Description

Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote unauthenticated attackers to log in as any user, merchant, or administrator.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-259

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-75218
Advisory
https://github.com/W000i/vuln/issues/11
exploit

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-75218		Advisory
https://github.com/W000i/vuln/issues/11		exploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 9, 2026

Updated Sep 14, 2026

Reserved Aug 7, 2026

Link CVE-2026-71809

CISA Vulnrichment

Updated Sep 14, 2026

NVD

Status Awaiting Analysis

Modified Sep 14, 2026

Link CVE-2026-71809

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-71809

ENISA EUVD

Assigner mitre

Published Sep 9, 2026

Updated Sep 14, 2026

Exploited since n/a

Link EUVD-2026-75218

EUVD-2026-75218