CVE WATCH / VULNERABILITY DETAIL

CVE-2026-116274

MEDIUMCVSS 4.3NVD feed

Published 26 October 2026 · tracked since 26 October 2026

Description

A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderController.php of the component Front-end Order Handler. Such manipulation of the argument orderno leads to improper authorization. The attack can be launched remotely. The exploit has b

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools