CVE-2026-82364: macrozheng mall Order Submission submit race condition

Severity: medium (CVSS 4.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-29 · updated 2026-08-31
Weakness: CWE-362

Description

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is said to be difficult. The vendor deleted the GitHub issue for this vulnerability without and explanation.

Affected products

macrozheng mall: 1.0.0, 1.0.1, 1.0.2, 1.0.3

References

https://github.com/macrozheng/mall/
https://github.com/macrozheng/mall/issues/983
https://vuldb.com/cve/CVE-2026-82364
https://vuldb.com/submit/887361
https://vuldb.com/vuln/396780
https://vuldb.com/vuln/396780/cti

Get alerted when CVE-2026-82364 or the next vulnerability affects your stack