---
id: CVE-2026-110125
title: >-
  Waynboot-mall through 2.0.0 contains an insecure direct object reference
  vulnerability that allows authenticated members to access and modify other
  members' orders by supplying their order identifiers
summary: >-
  Waynboot-mall through 2.0.0 contains an insecure direct object reference
  vulnerability that allows authenticated members to access and modify other
  members' orders by supplying their order identifiers. Attackers can enumerate
  sequential …
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-639
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T17:17:38.153'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-110125'
references:
  - url: >-
      https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-common/src/main/java/com/wayn/common/core/service/shop/impl/MobileOrderServiceImpl.java#L372-L473
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/OrderController.java#L41-L128
    label: disclosure@vulncheck.com
  - url: 'https://github.com/wayn111/waynboot-mall/releases/tag/v2.0.0'
    label: disclosure@vulncheck.com
  - url: >-
      https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/waynboot-mall-mobile-member-ownership-idor
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/waynboot-mall-through-2.0.0-idor-via-mobile-order-endpoints
    label: disclosure@vulncheck.com
tags:
  - nvd
ingestedAt: '2026-10-13T17:38:53.192Z'
---

## Overview

Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying their order identifiers. Attackers can enumerate sequential order ids or serial numbers via detail, cancel, confirm, delete and refund endpoints to read recipient addresses and phone numbers or disrupt orders.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.