CVE-2026-109181 | jishenghua jshERP up to 3.6 /depotHead/list DepotHeadService.select purchaseStatus authorization

October 12, 2026 Yanac

A vulnerability was found in jishenghua jshERP up to 3.6. It has been classified as problematic. Affected by this vulnerability is the function DepotHeadService.select of the file /depotHead/list. This manipulation of the argument purchaseStatus causes authorization bypass.

This vulnerability is handled as CVE-2026-109181. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More