CVE-2026-111354

🗓️ 15 Oct 2026 21:43:43Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 25 Views🌐 WEB

Authorization Bypass in crmeb_java allows members to read other members' orders.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-111354	15 Oct 202622:13	–	circl
CNNVD	CRMEB crmeb_java authorization issue vulnerability	14 Oct 202616:00	–	cnnvd
Cvelist	CVE-2026-111354 crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints	15 Oct 202621:43	–	cvelist
EUVD	EUVD-2026-102498	16 Oct 202600:31	–	euvd
Mend	CVE-2026-111354	15 Oct 202621:43	–	mend
NVD	CVE-2026-111354	15 Oct 202622:19	–	nvd
Positive Technologies	PT-2026-115298	15 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-111354: Authorization Bypass Through User-Controlled Key	15 Oct 202600:00	–	rapid7
Vulnrichment	CVE-2026-111354 crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints	15 Oct 202621:43	–	vulnrichment

Vulners

CNA

Node

crmeb crmeb_javaRange≤3.1

[
  {
    "vendor": "crmeb",
    "product": "crmeb_java",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "lessThanOrEqual": "3.1",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "packageURL": "pkg:github/crmeb/crmeb_java",
    "repo": "https://github.com/crmeb/crmeb_java"
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/crmeb-java-through-3.1-authorization-bypass-via-front-order-express-and-refund-endpoints
github	www.github.com/crmeb/crmeb_java/blob/31bb30dd240dc1168c7eeef065edf36b9700022e/backend/crmeb-service/src/main/java/com/zbkj/service/service/impl/OrderServiceImpl.java
github	www.github.com/crmeb/crmeb_java/blob/31bb30dd240dc1168c7eeef065edf36b9700022e/backend/crmeb-service/src/main/java/com/zbkj/service/service/impl/OrderServiceImpl.java
hackmd	www.hackmd.io/@hieuPenguinnn/crmeb-java-order-express-refund-cross-member-idor
github	www.github.com/crmeb/crmeb_java/blob/31bb30dd240dc1168c7eeef065edf36b9700022e/backend/crmeb-service/src/main/java/com/zbkj/service/service/impl/OrderServiceImpl.java

Parameter	Position	Path	Description	CWE
orderId	path	/api/front/order/express/{orderId}	Authorization bypass allowing authenticated members to view tracking numbers, logistics traces, payment amounts, and product lines of other members' orders by providing a specific order ID.	CWE-639
orderId	path	/api/front/order/apply/refund/{orderId}	Authorization bypass allowing authenticated members to view tracking numbers, logistics traces, payment amounts, and product lines of other members' orders by providing a specific order ID.	CWE-639

16 Oct 2026 18:25Current

5.8Medium risk

Vulners AI Score5.8

CVSS 42.3

CVSS 3.13.1

EPSS0.00323

SSVC

CWE-639