CVE-2026-25858
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
In macrozheng mall version 1.0.3 and prior, there is an authentication vulnerability in the mall-portal password reset workflow. An unauthenticated attacker can reset any user's password using only the victim's telephone number. The one-time password (OTP) is exposed in the API response, and the reset request is validated solely by comparing the provided OTP to a value stored by telephone number, without verifying user identity or ownership of the telephone number.
Risk Assessment
The risk is that an attacker can take over any user account with a known or guessable telephone number, leading to unauthorized data access, identity theft, or further attacks on the infrastructure.
Recommendation
Immediately upgrade macrozheng mall to a version newer than 1.0.3 where the vulnerability is patched. As a temporary workaround, disable the telephone-based password reset feature or implement additional identity verification.
Other vulnerabilities in macrozheng mall
See all- CVE-2026-15186Medium
A vulnerability was found in macrozheng mall up to version 1.0.3 in the file /returnApply/create of the Portal Endpoint component. Manipulation of the orderId argument leads to improper control of resource identifiers. The attack can be initiated remotely and the exploit is publicly available.
- CVE-2026-82423Medium
In macrozheng mall up to 1.0.3, a vulnerability exists in the Payment Status Endpoint component, in the file /order/paySuccess, where manipulation of the orderId argument leads to enforcement of behavioral workflow. The attack can be carried out remotely. The vendor deleted the GitHub issue without explanation.
- CVE-2026-82364Medium
A vulnerability has been detected in macrozheng mall up to 1.0.3. It affects an unknown function in the file /order/submit of the Order Submission component. The manipulation leads to a race condition. The attack can be initiated remotely but is considered difficult to exploit. The vendor deleted the GitHub issue without explanation.
- CVE-2026-79406Medium
A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.
- CVE-2026-10070Medium
Macrozheng mall up to version 1.0.3 has an authorization bypass vulnerability in the Super Admin Password Handler component in the /admin/update/ file. The attack can be performed remotely.
- CVE-2025-15118Medium
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the Member Endpoint component. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Original NVD description (English source)
macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitrary user account passwords using only a victim’s telephone number. The password reset flow exposes the one-time password (OTP) directly in the API response and validates password reset requests solely by comparing the provided OTP to a value stored by telephone number, without verifying user identity or ownership of the telephone number. This enables remote account takeover of any user with a known or guessable telephone number.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS