CVE-2026-109185 | jishenghua jshERP up to 3.6 UserController UserController.updateUser privileges management

October 12, 2026 Yanac

A vulnerability classified as critical has been found in jishenghua jshERP up to 3.6. This affects the function UserController.updateUser of the component UserController. Performing a manipulation results in improper privilege management.

This vulnerability is cataloged as CVE-2026-109185. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More