CVE-2026-86261

A weakness has been identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument...

CVE-2026-86261

An authorization bypass vulnerability exists in the Order Controller component of sfturing hosp_order (a rolling-release product), specifically in the file OrderController.java. Manipulating the userIdenf argument allows a remote, unauthenticated attacker to bypass authorization controls, resulti...