CVE-2026-116015 | YunaiV yudao-cloud up to 2026.09 Mall Trade afterSaleId resource injection

October 24, 2026 Yanac

A vulnerability was found in YunaiV yudao-cloud up to 2026.09 and classified as problematic. Affected by this issue is some unknown functionality of the component Mall Trade Module. The manipulation of the argument afterSaleId results in improper control of resource identifiers.

This vulnerability was named CVE-2026-116015. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More