EC-CUBE provided by EC-CUBE CO.,LTD.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 5, 2026 · NIST NVD

   Detected

   EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page.

2. Jun 17, 2026 · NIST NVD

   Updated

   EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page.

Affected

• cpe ec-cube/ec-cubeversion unspecified
• cpe ec-cube/ec-cube4.1.2

Sources

• CVE.orgVulnerability recordCVE-2026-30777

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-30777

  EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid administrator ID and password may be able to bypass two-factor authentication and gain unauthorized access to the administrative page.

  nvd.nist.gov

References

• Third Party Advisory · jvn.jp
• Patch · ec-cube.net