CVE-2026-94590

Published 10 October 2026 · tracked since 11 October 2026

Description

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-62050 CRITICAL 9.8
• CVE-2026-62051 CRITICAL 9.8
• CVE-2026-62052 CRITICAL 9.8
• CVE-2026-62053 CRITICAL 9.8
• CVE-2026-62035 MEDIUM 6.3
• CVE-2026-62021 HIGH 8.8
• CVE-2026-42719 CRITICAL 9.8
• CVE-2026-42723 CRITICAL 9.8
• CVE-2026-42716 CRITICAL 9.8
• CVE-2026-42718 CRITICAL 9.8

→ Open the live CVE board · all tools