CVE-2026-82423Medium· 5.4▾ SunlitA vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcem…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
0.3% → 0.4%
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115248Medium· 5.4subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow
CVE-2026-109406Medium· 5.4A weakness has been identified in macrozheng mall up to 1.0.3
CVE-2026-108789Medium· 5.5A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2
CVE-2026-108784Medium· 6.5A vulnerability was detected in macrozheng mall up to 1.0.3
CVE-2026-116461Medium· 4.3Omega Solution Restro POS sale-invoice logic error
CVE-2026-106070Low· 3.7nodejs: Node.js: Security inspection bypass via crafted ZIP archive header mismatch (CVE-2026-106070)