CVE-2026-109187 | jishenghua jshERP up to 3.6 PlatformConfigController getInfoByKey information disclosure

October 12, 2026 Yanac

A vulnerability labeled as problematic has been found in jishenghua jshERP up to 3.6. Impacted is the function getInfoByKey of the component PlatformConfigController. The manipulation results in information disclosure.

This vulnerability is identified as CVE-2026-109187. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More