CVE-2026-109406 | macrozheng mall up to 1.0.3 mall-portal /order/generateOrder OmsPortalOrderServiceImpl coupon_amount/pay_amount logic error (Issue 1002)

October 12, 2026 Yanac

A vulnerability classified as problematic has been found in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors.

This vulnerability is tracked as CVE-2026-109406. The attack is possible to be carried out remotely. No exploit exists.

The vendor deleted the GitHub issue for this vulnerability without any explanation.VulDB Recent EntriesRead More