{"uuid": "de8dfb69-59b0-4c25-8b13-ad5fb69f47b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102361", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwmjjp4r5b2w", "content": "gz-yami mall4j (<=4.0) faces a CRITICAL flaw \u2014 unauthenticated attackers can reset any user password via the updatePwd endpoint. Account takeover risk: review controls and patch fast. https://radar.offseq.com/threat/cve-2026-102361-missing-authentication-for-critical-function-in-gz-yami-mall4j-07...", "creation_timestamp": "2026-09-29T00:00:38.172510Z"}