CVE-2026-19037: WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral workflow
A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::updatelob of the file src/WtBtCore/MatchEngine.cpp of the component Internal Limit Order Book Cache Handler. This manipulation causes enforcement of behavioral workflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19037?
CVE-2026-19037 has a medium severity rating of 4.3.
How do I fix CVE-2026-19037?
To fix CVE-2026-19037, update WonderTrader to a version later than 0.9.9 that addresses this vulnerability.
What component is affected by CVE-2026-19037?
CVE-2026-19037 affects the Internal Limit Order Book Cache Handler of WonderTrader.
What kind of exploit is possible with CVE-2026-19037?
CVE-2026-19037 allows for manipulation of the behavioral workflow via the MatchEngine::update_lob function.
Is remote exploitation possible with CVE-2026-19037?
Yes, CVE-2026-19037 can be exploited remotely due to its associated vulnerabilities.