{"id":"CVE-2026-106676","aliases":["EUVD-2026-110019","GHSA-94rc-mchc-gwf9"],"status":"published","title":"qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an...","description":"qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative value. The order creation flow does not validate the resulting quantity and passes it to the stock update query, increasing inventory and creating negative-value orders.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00237,"percentile":0.14854,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-190"],"published":"2026-10-26T00:00:00Z","modified":"2026-11-02T18:33:07Z","references":[{"url":"https://github.com/qiujie/mall"},{"url":"https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-106676.md"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106676"},{"url":"https://github.com/advisories/GHSA-94rc-mchc-gwf9"}],"sources":{"cve":[{"id":"CVE-2026-106676","description":"qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative value. The order creation flow does not validate the resulting quantity and passes it to the stock update query, increasing inventory and creating negative-value orders.","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-11-02T16:40:50.85Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T18:00:08.034842Z"}],"euvd":[{"id":"EUVD-2026-110019","description":"qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative value. The order creation flow does not validate the resulting quantity and passes it to the stock update query, increasing inventory and creating negative-value orders.","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-11-02T16:40:50Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T05:08:40.251173Z"}],"ghsa":[{"id":"GHSA-94rc-mchc-gwf9","title":"qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an...","description":"qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative value. The order creation flow does not validate the resulting quantity and passes it to the stock update query, increasing inventory and creating negative-value orders.","status":"published","published":"2026-10-26T18:32:59Z","modified":"2026-11-02T18:33:07Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T19:02:40.409728Z"}],"nvd":[{"id":"CVE-2026-106676","description":"qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative value. The order creation flow does not validate the resulting quantity and passes it to the stock update query, increasing inventory and creating negative-value orders.","status":"published","published":"2026-10-26T17:17:11.837Z","modified":"2026-11-02T17:17:32.88Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T20:51:42.820268Z"}]}}