CVE-2026-19037CWE-841

CVE-2026-19037

Medium · published August 6, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
29.4
In the wild
Unconfirmed
What it is

A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::update_lob of the file src/WtBtCore/MatchEngine.cpp of the component Internal Limit Order Book Cache Handler. This manipulation causes enforcement of behavioral workflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00367 · 29.4th percentile
Weakness
CWE-841 · Improper Enforcement of Behavioral Workflow
Published
2026-08-06T17:17Z
References (5)
EPSS history
Timeline
  • 06 AUG 12:30Z
    WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral workflow
    cvelistv5