CVE-2026-102361 - mall4j through 4.0 Missing Authentication in Password Update Endpoint
CVE ID :CVE-2026-102361 Published : Sept. 28, 2026, 11:34 p.m. | 41 minutes ago Description :mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers to reset any storefront account password. Attackers can...