{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-11480",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-11480",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-06-08T02:30:11.142Z",
    "updatedAt": "2026-06-08T16:32:41.231Z",
    "importedAt": "2026-10-24T01:57:50.502Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection",
      "summary": "A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown function of the file beike/Admin/Routes/admin.php of the component Admin Design Builder Endpoint. Performing a manipulation of the argument settings.value results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The patch is named 2fa9805411088069fcc3b0c15b2f1f33d6e09958. To fix this issue, it is recommended to deploy a patch.",
      "affected": [
        {
          "vendor": "Chengdu Everbrite Network Technology",
          "product": "BeikeShop",
          "versions": [
            {
              "version": "1.6.0.0",
              "status": "affected"
            },
            {
              "version": "1.6.0.1",
              "status": "affected"
            },
            {
              "version": "1.6.0.2",
              "status": "affected"
            },
            {
              "version": "1.6.0.3",
              "status": "affected"
            },
            {
              "version": "1.6.0.4",
              "status": "affected"
            },
            {
              "version": "1.6.0.5",
              "status": "affected"
            },
            {
              "version": "1.6.0.6",
              "status": "affected"
            },
            {
              "version": "1.6.0.7",
              "status": "affected"
            },
            {
              "version": "1.6.0.8",
              "status": "affected"
            },
            {
              "version": "1.6.0.9",
              "status": "affected"
            },
            {
              "version": "1.6.0.10",
              "status": "affected"
            },
            {
              "version": "1.6.0.11",
              "status": "affected"
            },
            {
              "version": "1.6.0.12",
              "status": "affected"
            },
            {
              "version": "1.6.0.13",
              "status": "affected"
            },
            {
              "version": "1.6.0.14",
              "status": "affected"
            },
            {
              "version": "1.6.0.15",
              "status": "affected"
            },
            {
              "version": "1.6.0.16",
              "status": "affected"
            },
            {
              "version": "1.6.0.17",
              "status": "affected"
            },
            {
              "version": "1.6.0.18",
              "status": "affected"
            },
            {
              "version": "1.6.0.19",
              "status": "affected"
            },
            {
              "version": "1.6.0.20",
              "status": "affected"
            },
            {
              "version": "1.6.0.21",
              "status": "affected"
            },
            {
              "version": "1.6.0.22",
              "status": "affected"
            }
          ]
        }
      ]
    }
  }
}