macrozheng has 7 CVEs on record between 2025 and 2026. 5 were published in the last 90 days. The busiest recent month was October 2026 with 5. The median CVSS is 5.4 (medium). None have a confirmed exploitation report. Most affected products: mall (6), mall-swarm (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Worst active — by depth score
CVE-2026-108784Medium· 6.5A vulnerability was detected in macrozheng mall up to 1.0.348CVE-2026-108785Medium· 6.3A flaw has been found in macrozheng mall up to 1.0.347CVE-2025-13114Medium· 6.3A vulnerability was identified in macrozheng mall-swarm up to 1.0.335CVE-2026-109406Medium· 5.4A weakness has been identified in macrozheng mall up to 1.0.330CVE-2026-109407Low· 3.1A security vulnerability has been detected in macrozheng mall up to 1.0.329
macrozheng vulnerabilities
CVEs affecting macrozheng, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-109410Low· 2.4A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b
A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads…
CVE-2026-109407Low· 3.1PoCA security vulnerability has been detected in macrozheng mall up to 1.0.3
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads t…
CVE-2026-109406Medium· 5.4A weakness has been identified in macrozheng mall up to 1.0.3
A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amou…
CVE-2026-108785Medium· 6.3PoCA flaw has been found in macrozheng mall up to 1.0.3
A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token ca…
CVE-2026-108784Medium· 6.5PoCA vulnerability was detected in macrozheng mall up to 1.0.3
A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manip…
CVE-2025-15118Medium· 4.3A security vulnerability has been detected in macrozheng mall up to 1.0.3
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the component Member Endpoint. The manipulation leads to improper authorization. Re…
CVE-2025-13114Medium· 6.3A vulnerability was identified in macrozheng mall-swarm up to 1.0.3
A vulnerability was identified in macrozheng mall-swarm up to 1.0.3. This affects the function updateAttr of the file /cart/update/attr. Such manipulation leads to improper authorization. The attack may be performed from remote. The expl…