CVE-2026-109184 | jishenghua jshERP up to 3.6 findAccountInOutList accountId improper authorization

October 12, 2026 Yanac

A vulnerability described as problematic has been identified in jishenghua jshERP up to 3.6. The impacted element is an unknown function of the file /account/findAccountInOutList. Such manipulation of the argument accountId leads to improper authorization.

This vulnerability is listed as CVE-2026-109184. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More