CVE-2026-82423
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.
- Affected products
- Macrozheng Mall
- CVSS 2.0
- 5.5 MEDIUM
- CVSS 3.1
- 5.4 MEDIUM
- EPSS
- 0.2% (16th percentile)
- Weakness
- CWE-840, CWE-841
- NVD status
- Deferred
- Published
- 2026-08-29
CVE-2026-82423 at NVD
No indexed exploits for CVE-2026-82423 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-82423 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.