CVE-2026-109406
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Oct 13, 2026
Vendor
unknown
Description
A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.