CVE-2026-109178 | jishenghua jshERP up to 3.6 Audit Log /log/add LogController authorization

October 12, 2026 Yanac

A vulnerability was found in jishenghua jshERP up to 3.6 and classified as problematic. Affected is the function LogController of the file /log/add of the component Audit Log. The manipulation results in missing authorization.

This vulnerability is known as CVE-2026-109178. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More