CVE-2026-19208CWE-841

CVE-2026-19208

Low · published August 7, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file src/TraderDD/TraderDD.cpp. The manipulation of the argument FID_JYLB results in enforcement of behavioral workflow. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Weakness
CWE-841 · Improper Enforcement of Behavioral Workflow
Published
2026-08-07T20:17Z
References (5)
EPSS history
Timeline
  • 07 AUG 15:00Z
    WonderTrader TraderDD.cpp queryTrades behavioral workflow
    cvelistv5