EUVD-2026-88578

mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...

CVE-2026-102362

mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...

CVE-2026-102362: Missing Authentication for Critical Function

mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...

CVE-2026-102362 mall4j through 4.0 Missing Authentication in Product Review Deletion

mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...

CVE-2026-102362 mall4j through 4.0 Missing Authentication in Product Review Deletion

mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...

CVE-2026-102362 mall4j through 4.0 Missing Authentication in Product Review Deletion

mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks...

CVE-2026-102362

The mall4j framework, version 4.0 and below , contains a vulnerability where the DELETE /prodComm endpoint in ProdCommController lacks proper authentication controls. This flaw allows unauthenticated attackers to delete arbitrary product reviews by providing a prodCommId parameter without undergo...

PT-2026-102405

Name of the Vulnerable Software and Affected Versions mall4j versions prior to 4.1 Description The software fails to implement authentication controls on the 'DELETE /prodComm' endpoint within the ProdCommController. This allows unauthenticated attackers to delete arbitrary product reviews by...