# cve.now: Macrozheng

The newest entries naming Macrozheng as an affected vendor (up to 200), of 29 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-109410](https://cve.now/CVE-2026-109410.md): macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation (CVSS 4.8)
- [CVE-2026-109407](https://cve.now/CVE-2026-109407.md): macrozheng mall Coupon Redemption generateOrder race condition (CVSS 2.3)
- [CVE-2026-109406](https://cve.now/CVE-2026-109406.md): macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error (CVSS 5.3)
- [CVE-2026-108785](https://cve.now/CVE-2026-108785.md): macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration (CVSS 5.3)
- [CVE-2026-108784](https://cve.now/CVE-2026-108784.md): macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error (CVSS 6.9)
- [CVE-2026-82423](https://cve.now/CVE-2026-82423.md): macrozheng mall Payment Status Endpoint paySuccess behavioral workflow (CVSS 5.3)
- [CVE-2026-82364](https://cve.now/CVE-2026-82364.md): macrozheng mall Order Submission submit race condition (CVSS 2.3)
- [CVE-2026-79406](https://cve.now/CVE-2026-79406.md): macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error (CVSS 5.3)
- [CVE-2026-19361](https://cve.now/CVE-2026-19361.md): macrozheng mall mall-portal getAuthCode password recovery (CVSS 6.3)
- [CVE-2026-15186](https://cve.now/CVE-2026-15186.md): macrozheng mall Portal Endpoint create resource injection (CVSS 5.3)
- [CVE-2026-10070](https://cve.now/CVE-2026-10070.md): macrozheng mall Super Admin Password update improper authorization (CVSS 5.1)
- [CVE-2026-25858](https://cve.now/CVE-2026-25858.md): macrozheng mall \<= 1.0.3 Unauthenticated Password Reset via OTP Disclosure (CVSS 9.3)
- [CVE-2025-15118](https://cve.now/CVE-2025-15118.md): macrozheng mall Member Endpoint update improper authorization (CVSS 5.3)
- [CVE-2025-14016](https://cve.now/CVE-2025-14016.md): macrozheng mall-swarm delete improper authorization (CVSS 5.3)
- [CVE-2025-13443](https://cve.now/CVE-2025-13443.md): macrozheng mall delete access control (CVSS 5.3)
- [CVE-2025-13118](https://cve.now/CVE-2025-13118.md): macrozheng mall-swarm paySuccess improper authorization (CVSS 5.3)
- [CVE-2025-13117](https://cve.now/CVE-2025-13117.md): macrozheng mall-swarm/mall cancelOrder improper authorization (CVSS 5.3)
- [CVE-2025-13116](https://cve.now/CVE-2025-13116.md): macrozheng mall-swarm/mall cancelUserOrder improper authorization (CVSS 5.3)
- [CVE-2025-13115](https://cve.now/CVE-2025-13115.md): macrozheng mall-swarm/mall Order Details detail improper authorization (CVSS 5.3)
- [CVE-2025-13114](https://cve.now/CVE-2025-13114.md): macrozheng mall-swarm attr updateAttr improper authorization (CVSS 5.3)
- [CVE-2025-9836](https://cve.now/CVE-2025-9836.md): macrozheng mall paySuccess authorization (CVSS 5.3)
- [CVE-2025-9835](https://cve.now/CVE-2025-9835.md): macrozheng mall cancelUserOrder cancelOrder authorization (CVSS 5.3)
- [CVE-2025-9514](https://cve.now/CVE-2025-9514.md): macrozheng mall Registration weak password (CVSS 6.3)
- [CVE-2025-8755](https://cve.now/CVE-2025-8755.md): macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization (CVSS 6.9)
- [CVE-2025-8750](https://cve.now/CVE-2025-8750.md): macrozheng mall Add Product Page upload cross site scripting (CVSS 4.8)
- [CVE-2025-8742](https://cve.now/CVE-2025-8742.md): macrozheng mall Admin Login excessive authentication (CVSS 6.3)
- [CVE-2025-8741](https://cve.now/CVE-2025-8741.md): macrozheng mall login cleartext transmission (CVSS 6.3)
- [CVE-2025-8191](https://cve.now/CVE-2025-8191.md): macrozheng mall Swagger UI index.html cross site scripting (CVSS 5.1)
- [CVE-2024-11619](https://cve.now/CVE-2024-11619.md): macrozheng mall JWT Token default key (CVSS 2.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/macrozheng
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.