Skip to content
OpenAdvisories

Weakness (CWE)

CWE-840: Business Logic Errors

Category Incomplete Mapping prohibited

Weaknesses in this category identify some of the underlying problems that commonly allow attackers to manipulate the business logic of an application. Errors in business logic can be devastating to an entire application. They can be difficult to find automatically, since they typically involve legitimate use of the application's functionality. However, many business logic errors can exhibit patterns that are similar to well-understood implementation and design weaknesses.

Source: MITRE CWE-840

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-124576 Public exploit

    BeikeShop Guest Order Lookup OrderRepo.php getOrderByNumber behavioral workflow

    A security flaw has been discovered in BeikeShop up to 2.0.0.31. Impacted is the function OrderRepo::getOrderByNumber of the file beike/Repositories/OrderRepo.php of the component Guest Order Lookup. Performing a manipulation of the argument order_number resu…

  • Low 3.7
    CVE-2026-106070 Public exploit

    A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after t…

    nodejs node nodejs nodejs Ubuntu Alpine