CVE-2026-109406 in mall
Prediction
by VulDB Data Team • 10/12/2026
A weakness has been identified in <a href="/product/macrozheng:mall">macrozheng mall up to 1.0.3</a>. This vulnerability affects the function <code>OmsPortalOrderServiceImpl</code> of the file <em>/order/generateOrder</em> of the component <em>mall-portal</em>. This manipulation of the argument <em>coupon_amount/pay_amount</em> causes business logic errors. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.