Medium severity · published Oct 13, 2026
CVE-2026-110127
waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints
4.3
CVSS
0.2%
EPSS
No
On KEV
Description
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other members' cart items. Attackers can enumerate sequential cart ids via PUT /cart, POST /cart/changeNum, and DELETE /cart/{cartId} to change quantities, selection state, or remove items.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
waynboot-mall · wayn111
through 2.0.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-110127
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-110127
third-party-advisory
https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/waynboot-mall-mobile-member-ownership-idor
technical-description
https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/CartController.java#L75-L101
technical-description
https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-common/src/main/java/com/wayn/common/core/service/shop/impl/CartServiceImpl.java#L151-L158
release-notes
https://github.com/wayn111/waynboot-mall/releases/tag/v2.0.0
third-party-advisory
https://www.vulncheck.com/advisories/waynboot-mall-through-2.0.0-idor-via-mobile-cart-endpoints
More from waynboot-mall
6.5
CVE-2026-111660
waynboot-mall through 2.0.0 Missing Authentication via /callback/order/unpaid
6.5
CVE-2026-111659
Waynboot-mall through 2.0.0 Unauthenticated Order Forgery via /callback/order/submit
6.3
CVE-2026-110125
waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints
5.4
CVE-2026-110126
waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints
5.3
CVE-2026-111661
waynboot-mall through 2.0.0 Missing Authentication via /callback/email Mail Endpoint