{"uuid": "7c58e4ca-d451-4f23-b898-f19eb1559e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102361", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117351385362119175", "content": "CVE-2026-102361 in gz-yami mall4j (<=4.0): CRITICAL bug lets anyone reset any user password via PUT /user/updatePwd \ud83d\udee1\ufe0f. Enables account takeover and access to sensitive data. Patch ASAP! https://radar.offseq.com/threat/cve-2026-102361-missing-authentication-for-critical-function-in-gz-yami-mall4j-07dd220d69f425c2 #OffSeq #CVE2026102361 #infosec #ecommerce", "creation_timestamp": "2026-09-29T00:00:36.465702Z"}