Race Condition Vulnerability in Smartstore E-commerce Platform

CVE-2025-10778

What is CVE-2025-10778?

A race condition vulnerability has been identified in the Smartstore e-commerce platform, specifically within its Gift Voucher Handler component located at /checkout/confirm/. This flaw permits an attacker to manipulate the functionality remotely, potentially leading to unintended behaviors in the system. The complexity involved in executing this attack is considered high, and initial outreach to the vendor regarding the issue has gone unanswered. Users of Smartstore versions up to 6.2.0 should evaluate their security posture and consider implementing necessary mitigations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References