CVE-2026-19212
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A vulnerability was found in WonderTrader up to version 0.9.9, affecting the TraderATP Cash Trade Conversion in src/Includes/WTSTradeDef.hpp. Manipulating the m_offsetType argument leads to use of an uninitialized variable. The attack can be executed remotely, and the exploit has been publicly disclosed.
Risk Assessment
The risk involves potential remote exploitation, leading to unpredictable system behavior or data integrity issues. Public disclosure of the exploit increases the likelihood of attacks.
Recommendation
It is recommended to update WonderTrader to the latest available version if one exists, and to monitor vendor security advisories. Also, restrict access to the system from trusted sources.
Original NVD description (English source)
A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trade Conversion. Executing a manipulation of the argument m_offsetType can lead to use of uninitialized variable. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.