OpenClaw has an unspecified vulnerability (CNVD-2026-19026)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to suppress legitimate events on different accounts by matching the eventname and messageid parameters...

CVE-2025-55368

The jshERP version v3.5 (a homegrown ERP system) is vulnerable to an incorrect access control issue in the \controller\RoleController.java component. This vulnerability allows unauthorized attackers to arbitrarily modify the supplier status under any account. No specific remediation or patch vers...