CVE-2026-109187

The jshERP software (versions through 3.6 ) is susceptible to an information disclosure vulnerability. An authenticated, low-privilege user from any tenant can access platform-wide configuration secrets by exploiting the getInfoByKey handler within the PlatformConfigController . Due to insufficie...