CVE-2026-82364

EUVD-2026-68092

29.08.2026, 11:16

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is said to be difficult. The vendor deleted the GitHub issue for this vulnerability without and explanation.

Race Condition

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
VulDB	CNA	4.2 MEDIUM	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
macrozheng	mall	1.0.0	CNA
macrozheng	mall	1.0.1	CNA
macrozheng	mall	1.0.2	CNA
macrozheng	mall	1.0.3	CNA

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

https://github.com/macrozheng/mall/

https://github.com/macrozheng/mall/issues/983

https://vuldb.com/cve/CVE-2026-82364

https://vuldb.com/submit/887361

https://vuldb.com/vuln/396780

https://vuldb.com/vuln/396780/cti