Improper Authorization in macrozheng mall Super Admin Password Handler

CVE-2026-10070

What is CVE-2026-10070?

A vulnerability present in the macrozheng mall versions up to 1.0.3 affects the Super Admin Password Handler component located in the /admin/update/ file. This flaw allows for improper authorization, potentially leading to unauthorized access. The vendor's lack of response to early disclosure attempts raises concerns regarding the attention this issue receives. Remote exploitation of this vulnerability is possible, making it crucial for users to ensure their installations are secure, especially considering that the vendor deleted related GitHub issues without explanation.

References