CVE-2026-102365 | gz-yami mall4j up to 4.0 UserAddrController /user/addr/page improper authorization

September 29, 2026 Yanac

A vulnerability described as problematic has been identified in gz-yami mall4j up to 4.0. The impacted element is an unknown function of the file /user/addr/page of the component UserAddrController. Executing a manipulation can lead to improper authorization.

This vulnerability is registered as CVE-2026-102365. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More