CVE-2026-86261
A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument userIdenf can lead to authorization bypass. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 7.5
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
- EPSS probability
- 0.41%
- CWE
- CWE-639, CWE-285
- Published
- 2026-09-07
- Last modified
- 2026-09-08
Affected products
- sfturing hosp_order
Weakness type
Related vulnerabilities
- CVE-2026-47156 — MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator
- CVE-2026-67403 — Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API....
- CVE-2026-86763 — snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer
- CVE-2026-86761 — snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints
- CVE-2026-86743 — Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report
- CVE-2026-87809 — Siyuan before v3.8.2 Information Disclosure via Export Preview
- CVE-2026-87033 — Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87025 — Tanium addressed an improper access controls vulnerability in Comply.