CVE-2026-109407 | macrozheng mall up to 1.0.3 Coupon Redemption /order/generateOrder couponId race condition (Issue 1003)

October 12, 2026 Yanac

A vulnerability classified as problematic was found in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads to race condition.

This vulnerability is listed as CVE-2026-109407. The attack may be performed from remote. There is no available exploit.

The vendor deleted the GitHub issue for this vulnerability without any explanation.VulDB Recent EntriesRead More