Attackers are exploiting CVE-2026-103671 in the wild, an EC-CUBE AmazonPay Plugin vulnerability that redirects shoppers to steal account credentials.

#CVE2026103671 #ECCUBE #AmazonPay #EcommerceSecurity #JPCERT #Cybersecurity #InfoSec