Module: Security Scan
The core module checks your JTL-Shop for known vulnerabilities, suspicious files, and active threats.
What is checked?
CVE Check
The module compares your installed JTL-Shop and plugin versions against a database of known CVEs. Currently includes:
- CVE-2026-54390 — Critical template injection vulnerability in JTL-Shop (CVSS 9.8). Officially disclosed in the JTL Partner Newsletter on 17.06.2026.
File Scan
The module scans the shop directory for signatures of known webshells and backdoors, including patterns such as eval(base64_decode(...)), obfuscated PHP code, and known webshell filenames.
Configuration Check
Critical misconfigurations are checked, including:
- Publicly accessible backup files (
.sql,.zip,.tar.gz) - Exposed configuration files
- Missing or incorrect file permissions
Result Display
| Colour | Meaning |
|---|---|
| 🔴 Red | Critical finding — immediate action required |
| 🟡 Yellow | Warning — review recommended soon |
| 🟢 Green | No critical findings |
Reference Date
The pre-set reference date 17.06.2026 corresponds to the publication date of the JTL security advisory for CVE-2026-54390. Only vulnerabilities known up to this date are checked — useful for audit traceability.