CVE-2026-86261 | sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8 Order Controller OrderController.java userIdenf authorization (Issue 114)

SecurityVulns
Yanac

A vulnerability classified as critical was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument userIdenf can lead to authorization bypass.

This vulnerability is handled as CVE-2026-86261. The attack can be executed remotely. Additionally, an exploit exists.

This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More