Threats Tagged 'cve-2026-82423'
View all threats tagged with 'cve-2026-82423'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-82423'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability exists in macrozheng mall versions 1.0.0 through 1.0.3 in the Payment Status Endpoint (/order/paySuccess). The issue involves manipulation of the orderId argument, which can enforce unintended behavioral workflow remotely. The vendor has not provided a patch or explanation, and the GitHub issue was deleted without comment. The CVSS score is 5.4, indicating a low severity level with limited impact on confidentiality but some impact on integrity and availability. Join the discussion | GCVE Database | 08/30/2026, 00:30:21 UTC Added: 08/30/2026, 15:27:18 UTC |
CVE-2026-82423 is a medium severity vulnerability in macrozheng mall up to version 1.0.3. It involves an unknown function in the /order/paySuccess endpoint of the Payment Status component. The vulnerability arises from manipulation of the orderId argument, which leads to enforcement of behavioral workflow. The attack can be performed remotely. The vendor has not provided a patch or remediation guidance and deleted the related GitHub issue without explanation. Join the discussion | CVE Database V5 | 08/29/2026, 22:15:10 UTC Added: 08/30/2026, 11:03:05 UTC |
Showing 1 to 2 of 2 results