CVE-2026-109172 | guchengwuyue yshop-crm up to 2.1.3 Receivables check CrmContractReceivablesServiceImpl.check missing authentication

October 12, 2026 Yanac

A vulnerability classified as problematic has been found in guchengwuyue yshop-crm up to 2.1.3. Impacted is the function CrmContractReceivablesServiceImpl.check of the file /admin-api/crm/contract-receivables/check of the component Receivables. This manipulation causes missing authentication.

This vulnerability is registered as CVE-2026-109172. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More