CVE-2026-109179 | jishenghua jshERP up to 3.6 Audit Log /log/list LogController missing authentication

October 12, 2026 Yanac

A vulnerability identified as problematic has been detected in jishenghua jshERP up to 3.6. Affected by this issue is the function LogController of the file /log/list of the component Audit Log. Performing a manipulation results in missing authentication.

This vulnerability is identified as CVE-2026-109179. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More