CVE-2026-109180 | jishenghua jshERP up to 3.6 getMaterialDepotStockByParam depotId/depotIds authorization

October 12, 2026 Yanac

A vulnerability was found in jishenghua jshERP up to 3.6. It has been declared as problematic. Affected by this issue is some unknown functionality of the file /depotItem/getMaterialDepotStockByParam. Such manipulation of the argument depotId/depotIds leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-109180. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More