CVE-2026-19208 is a low-severity vulnerability in WonderTrader versions up to 0.9.9. It affects the TraderDD::queryTrades function in src/TraderDD/TraderDD.cpp, where manipulation of the argument FID_JYLB can alter the behavioral workflow. The attack vector is remote with no privileges or user interaction required, but it has high attack complexity. Exploit code is publicly available, though exploitation is considered difficult. The vendor was notified but did not provide any response or patch information.

The vulnerability allows an attacker to remotely manipulate the argument FID_JYLB in the TraderDD::queryTrades function, resulting in enforcement of behavioral workflow changes. There is no confidentiality or availability impact reported, only integrity impact is noted. The overall impact is low severity with no known active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should monitor official channels for updates. Due to the high complexity and low exploitability, immediate urgent action is not indicated.