CVE-2026-109410

Published: Ott 13, 2026 Last Modified: Ott 13, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 4,8

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: high

User Interaction: passive

Confidentiality: N/A

Integrity: N/A

Availability: N/A

LOW 2,4

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: high

User Interaction: required

Scope: unchanged

Confidentiality: none

Integrity: low

Availability: none

LOW 3,3

Source: [email protected]

Access Vector: network

Access Complexity: low

Authentication: multiple

Confidentiality: none

Integrity: partial

Availability: none

Description

AI Translation Available

A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads to incorrect calculation. The attack can be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

682

Incorrect Calculation

Draft

Abstraction: Pillar Structure: Simple

Common Consequences

Security Scopes Affected:

Availability Integrity Confidentiality Access Control

Potential Impacts:

Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Other) Execute Unauthorized Code Or Commands Gain Privileges Or Assume Identity Bypass Protection Mechanism