CVE-2026-82423

EUVD-2026-68138
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
macrozhengmall
1.0.0
CNA
macrozhengmall
1.0.1
CNA
macrozhengmall
1.0.2
CNA
macrozhengmall
1.0.3
CNA
Common Weakness Enumeration
References
https://github.com/macrozheng/mall/
https://github.com/macrozheng/mall/issues/985
https://vuldb.com/cve/CVE-2026-82423
https://vuldb.com/submit/887391
https://vuldb.com/vuln/397008
https://vuldb.com/vuln/397008/cti