Threats tagged 'ghsa-q68v-x5p2-qf6h'

CVE-2026-19208 is a low-severity vulnerability in WonderTrader versions up to 0.9.9 affecting the TraderDD::queryTrades function. It involves manipulation of the FID_JYLB argument, which enforces behavioral workflow changes. The attack can be performed remotely but requires high complexity and no privileges or user interaction. Public exploit code exists, but exploitation is considered difficult. The vendor has not responded to disclosure requests and no patch or mitigation is currently available.