@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

gz-yami mall4j (<=4.0) faces a CRITICAL flaw — unauthenticated attackers can reset any user password via the updatePwd endpoint. Account takeover risk: review controls and patch fast. https://radar.offseq.com/threat/cve-2026-102361-missing-authentication-for-critical-function-in-gz-yami-mall4j-07... https://radar.offseq.com/threat/cve-2026-102361-missing-authentication-for-critical-function-in-gz-yami-mall4j-07dd220d69f425c2

2026-09-29T00:00:37.665Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.