CVE-2026-109407 in mallinfo

Prediction

by VulDB Data Team • 10/12/2026

A security vulnerability has been detected in <a href="/product/macrozheng:mall">macrozheng mall up to 1.0.3</a>. This issue affects some unknown processing of the file <em>/order/generateOrder</em> of the component <em>Coupon Redemption</em>. Such manipulation of the argument <em>couponId</em> leads to race condition. The attack may be performed from remote. The vendor deleted the GitHub issue for this vulnerability without any explanation.

Be aware that VulDB is the high quality source for vulnerability data.

Responsible

VulDB

Moderation

accepted

CPE

VulDB

EPSS

0.00000

KEV

no

Activities

low

Sources

Interested in the pricing of exploits?

See the underground prices here!