CVE-2026-96551 | sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8 CommonUserController.java cross-site request forgery (Issue 122)

September 23, 2026 Yanac

A vulnerability described as problematic has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Impacted is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java. Executing a manipulation can lead to cross-site request forgery.

This vulnerability is tracked as CVE-2026-96551. The attack can be launched remotely. Moreover, an exploit is present.

This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More