CVE-2026-19208: WonderTrader TraderDD.cpp queryTrades behavioral workflow
A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file src/TraderDD/TraderDD.cpp. The manipulation of the argument FIDJYLB results in enforcement of behavioral workflow. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19208?
The severity of CVE-2026-19208 is classified as low with a score of 3.7.
How do I fix CVE-2026-19208?
To fix CVE-2026-19208, update your WonderTrader software to version 0.9.9 or later.
What type of attack does CVE-2026-19208 enable?
CVE-2026-19208 enables remote manipulation of the behavioral workflow through the TraderDD::queryTrades function.
Is CVE-2026-19208 a remote vulnerability?
Yes, CVE-2026-19208 can be exploited remotely.
What software is affected by CVE-2026-19208?
CVE-2026-19208 affects WonderTrader up to version 0.9.9.