CVE-2026-10070: macrozheng mall Super Admin Password update improper authorization
A vulnerability was found in macrozheng mall up to 1.0.3. This affects an unknown function of the file /admin/update/ of the component Super Admin Password Handler. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The vendor deleted the GitHub issue for this vulnerability without any explanation. Afterwards the vendor was contacted early about this disclosure via email but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10070?
The severity of CVE-2026-10070 is classified as medium with a score of 5.1.
What issue does CVE-2026-10070 represent?
CVE-2026-10070 represents an improper authorization vulnerability in the Super Admin Password update functionality of macrozheng mall.
How can CVE-2026-10070 be exploited?
CVE-2026-10070 can be exploited remotely by manipulating the authorization during the Super Admin Password update process.
What versions of macrozheng mall are affected by CVE-2026-10070?
CVE-2026-10070 affects macrozheng mall versions up to 1.0.3.
How do I fix CVE-2026-10070?
To fix CVE-2026-10070, update to a patched version of macrozheng mall that addresses the improper authorization issue.