CVE-2026-79406 | macrozheng mall up to 1.0.3 /cart/update/quantity OmsCartItemServiceImpl.updateQuantity logic error (Issue 984)

August 25, 2026 Yanac

A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors.

This vulnerability is listed as CVE-2026-79406. The attack may be initiated remotely. There is no available exploit.

The vendor deleted the GitHub issue for this vulnerability without any explanation.VulDB Recent EntriesRead More