Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N H N N N N L N 2.9 .0028 20.2 —
AFFECTED Product Versions Fixed mall 0504e86 – —
TIMELINE Aug 8 Reserved by VulDB Aug 9 Published (CNA: VulDB) Aug 12 EXPLOIT PUBLISHED — CVE-2026-19361 (macrozheng mall). Public exploit reference added.
A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code of the file /sso/getAuthCode of the component mall-portal Module. Executing a manipulation can lead to weak password recovery. The attack may be launched remotely. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit has been published and may be used. The vendor deleted the GitHub issue for this vulnerability without any explanation. Afterwards the vendor was contacted early about this disclosure via email but did not respond in any way.
| Date | Event | Detail |
|---|---|---|
| August 8, 2026 | Reserved | Reserved by VulDB |
| August 9, 2026 | Published | Published (CNA: VulDB) |
| August 12, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-19361 (macrozheng mall). Public exploit reference added. |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| macrozheng | mall | — | 0504e86 | — |
Authoritative record: CVE-2026-19361 at cve.org
Vendors: macrozheng
Weaknesses: CWE-640
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-19361 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.