CVE-2026-116015

The yudao-cloud platform (versions through 2026.09 ) contains an Insecure Direct Object Reference (IDOR) vulnerability within the mall trade module . The root cause is the lack of proper authorization checks when accessing the after-sale-log list endpoint . Authenticated members can bypass securi...