https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T19:28:00.681483+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110126 CVE-2026-110126 — waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints 2026-10-14T19:28:00.682810+00:00

Affected: wayn111 waynboot-mall

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment address ids and send POST /address or DELETE /address/{addressId} requests to overwrite or remove victims' saved addresses.