CVE-2026-39079
Prestashop UPS Shipping Module Enables Remote Information Disclosure via Logs and API Source
An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and /modules/upsshipping/lib/UPSBaseApi.php components
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products