CVE-2026-2165 | detronetdip E-commerce 1.0.0 Account Creation Endpoint add_seller.php email missing authentication (Issue 23)

A vulnerability was found in detronetdip E-commerce 1.0.0 and classified as critical. Impacted is an unknown function of the file /Admin/assets/backend/seller/add_seller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication.

This vulnerability is handled as CVE-2026-2165. The attack can be executed remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.