CVE-2026-86262: Authorization Bypass Through User-Controlled Key

A security vulnerability has been detected in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects the function updateOrderSta1/updateOrderdiseaseInfo of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Handler. The manipulation ...

CVE-2026-8737: Missing Authentication for Critical Function

A weakness has been identified in Sanluan PublicCMS 5.202506.d. This issue affects the function execute of the file publiccms-trade/src/main/java/com/publiccms/views/directive/trade/TradeAddressListDirective.java of the component Trade Address Query Handler. Executing a manipulation of the argume...