Vulnerability · Published Oct 13, 2026 · Assigned by VulnCheck

CVE-2026-110127waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints

Medium 4.3

In plain English

A medium-severity authorization bypass via user-controlled key in waynboot-mall from wayn111. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.2%top 84.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other members' cart items. Attackers can enumerate sequential cart ids via PUT /cart, POST /cart/changeNum, and DELETE /cart/{cartId} to change quantities, selection state, or remove items.

Affected products (as reported)

Vendor	Product	Versions
wayn111	waynboot-mall	0 – through 2.0.0

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

References

https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/waynboot-mall-mobile-member-ownership-idor third-party-advisory
https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/CartController.java#L75-L101 technical-description
https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-common/src/main/java/com/wayn/common/core/service/shop/impl/CartServiceImpl.java#L151-L158 technical-description
waynboot-mall v2.0.0 Release Notes release-notes
VulnCheck Advisory: waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints third-party-advisory