CVE-2026-109183 | jishenghua jshERP up to 3.6 Approval Workflow addDepotHeadAndDetail status authorization

October 12, 2026 Yanac

A vulnerability marked as problematic has been reported in jishenghua jshERP up to 3.6. The affected element is an unknown function of the file /depotHead/addDepotHeadAndDetail of the component Approval Workflow. This manipulation of the argument Status causes authorization bypass.

This vulnerability is tracked as CVE-2026-109183. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More