CVE-2026-19213

Name of the Vulnerable Software and Affected Versions WonderTrader versions prior to 1.0.0

Description A remote issue exists in the Pending Order Handler component within the src/WtCore/TraderAdapter.h library. Manipulation of the getUndoneQty argument in the undone qty() function allows an attacker to enforce a behavioral workflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the undone qty() function within the Pending Order Handler component.