CVE-2026-86260

A security flaw has been discovered in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function modifyPassWord of the file ssmpro/src/main/java/cn/sfturing/web/CommonUserController.java of the component Password Recovery. Performing a manipulation...

CVE-2026-86260

CVE-2026-86260 affects the Password Recovery component of sfturing hosp_order (a Java/SSM-based hospital order management system). The flaw resides in the modifyPassWord function within ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java, where a password can be changed without proper...