Is CVE-2026-15186 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-15186 being exploited in the wild.

How severe is CVE-2026-15186?

Medium severity, with a CVSS score of 6.3, published 9 July 2026.

Is there a fix for CVE-2026-15186?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-15186 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-15186?

Check whether you run Macrozheng Mall at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-15186: macrozheng mall resource injection in Portal Endpoint

CVE-2026-15186 · Severity: medium · CVSS 6.3 · Published 2026-07-09

A security vulnerability has been identified in the macrozheng mall e-commerce platform, which provides online shopping and management services. An attacker could manipulate order identifiers during the return application process to potentially access or modify data they should not have permission to see. This could lead to unauthorized access to customer order information or disruption of the return processing system.

Technologies: Macrozheng Mall. Vendors: Macrozheng.

Quick answers

Is CVE-2026-15186 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-15186 being exploited in the wild.
How severe is CVE-2026-15186?: Medium severity, with a CVSS score of 6.3, published 9 July 2026.
Which products and versions are affected?: Macrozheng Mall up to 1.0.3.
Is there a fix for CVE-2026-15186?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-15186 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-15186?: Check whether you run Macrozheng Mall at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is classified as Improper Control of Resource Identifiers (CWE-99) within the Portal Endpoint component of the macrozheng mall system. Specifically, the '/returnApply/create' endpoint fails to properly validate or restrict the 'orderId' argument. A remote attacker with low-level privileges (authenticated user) can manipulate this parameter to interact with resources (orders) they do not own. This could result in unauthorized data retrieval or modification of order return requests. While an exploit is reportedly available publicly, the vendor has not provided an official fix and reportedly deleted the original issue report.

Affected products

macrozheng mall up to 1.0.3

Timeline

2026-07-09: disclosed: Vulnerability disclosed via VulDB and NVD
2026-07-09: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.