CVE-2026-111697 | roinli ChargeOS Cloud up to 3.0.9 MeController/OrderController getMemberBalanceByUserId userId/openId/orderNumber resource injection

October 16, 2026 Yanac

A vulnerability was found in roinli ChargeOS Cloud up to 3.0.9. It has been classified as problematic. This issue affects some unknown processing of the file /me/getMemberBalanceByUserId of the component MeController/OrderController. This manipulation of the argument userId/openId/orderNumber causes improper control of resource identifiers.

This vulnerability is tracked as CVE-2026-111697. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More