BizSpring BizSpring Java Mall

• CVE-2026-110608 Medium 5.4 BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive 0.4%
• CVE-2026-110607 Medium 6.5 BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint 0.3%