Login Request a demo
MA
Product
mall4j
by gz-yami · last CVE Oct 11, 2026
9
CVEs
0
On KEV
9.1
Max CVSS
9
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 0Medium 7Low 1
Severity
All severities9Critical1High0Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add mall4j to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102361
9.1
0%
Sep 28
mall4j through 4.0 Missing Authentication in Password Update Endpoint
Affected: through 4.0
CVE-2026-102365
6.5
0%
Sep 28
mall4j through 4.0 Missing Authorization in Admin User Address Endpoints
Affected: through 4.0
CVE-2026-108691
5.4
0%
Oct 11
mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList
Affected: through 4.0
CVE-2026-102367
5.4
0%
Sep 28
mall4j through 4.0 Insufficient Session Expiration via Token Refresh
Affected: through 4.0
CVE-2026-102364
5.4
0%
Sep 28
mall4j through 4.0 Improper Authentication Accepts Storefront Tokens on Admin API
Affected: through 4.0
CVE-2026-102362
5.3
0%
Sep 28
mall4j through 4.0 Missing Authentication in Product Review Deletion
Affected: through 4.0
CVE-2026-102366
4.4
0%
Sep 28
mall4j through 4.0 Unrestricted File Upload in Admin File Endpoints
Affected: through 4.0
CVE-2026-108690
4.3
0%
Oct 11
mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList
Affected: through 4.0
CVE-2026-102363
3.7
0%
Sep 28
mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number
Affected: through 4.0
Showing 9