Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-116015— yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint

Quick assessment

Affected
YunaiV yudao-cloud
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

yudao-cloud 在 2026.09 版本之前存在一个不安全的直接对象引用（IDOR）漏洞，该漏洞位于商城交易模块中。已认证的用户可通过提供任意的 afterSaleId 值，读取其他会员的售后操作日志。攻击者可通过对 GET /app-api/trade/after-sale-log/list 接口枚举连续的售后 ID，从而泄露其他会员的退款金额、状态变更及时间戳等敏感信息。

CVSS 4.3 · Medium

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 1

VendorProduct Version RangeStatus
YunaiV yudao-cloud ≤ 2026.09 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-116015

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated members to read other members' after-sale operation logs by supplying arbitrary afterSaleId values. Attackers can enumerate sequential after-sale IDs against GET /app-api/trade/after-sale-log/list to expose refund amounts, status transitions and timestamps belonging to other members.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
YunaiV yudao-cloud 0 ~ 2026.09 -

II. Public POCs for CVE-2026-116015

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-116015

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-116015 (1)

Vendor Advisories for CVE-2026-116015 (1)

Proof of Concept for CVE-2026-116015 (1)

Security Blog Posts for CVE-2026-116015 (1)

Vendor Pages for CVE-2026-116015 (1)

IV. Related Vulnerabilities

Same product: yudao-cloud
Same vendor: YunaiV
Same weakness: CWE-639