Is CVE-2026-108785 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108785?

CVE-2026-108785 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-108785

Description

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely. The exploit has been published and may be used. Patch name: 9bfc2fd2c4aaa4ac519e9152e65d673a5380de1a. To fix this issue, it is recommended to deploy a patch.