CVE-2026-109407 — macrozheng mall Coupon Redemption generateOrder race condition
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Re…
Published: 2026-10-13 · CVSS: 2.3 · CVSS 4.0
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads to race condition. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is assessed as difficult. The vendor deleted the GitHub issue for this vulnerability without any explanation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7