CVE-2026-111698 | HUIZHI ChargeOS up to 3.0.9 Recharge hcp-mp PayController.xcxRecharge amount/userId authorization

SecurityVulns
Yanac

A vulnerability was found in HUIZHI ChargeOS up to 3.0.9. It has been rated as problematic. The affected element is the function hcp-mp PayController.xcxRecharge of the component Recharge. Performing a manipulation of the argument amount/userId results in missing authorization.

This vulnerability is cataloged as CVE-2026-111698. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More