CVE-2026-116274Medium· 4.3▾ SunlitA vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderController.php of the component Front-end Order Handler. Such manipulation of the argument orderno leads to improper author…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderController.php of the component Front-end Order Handler. Such manipulation of the argument orderno leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
JIZHICMS 2.5.0JIZHICMS 2.5.1JIZHICMS 2.5.2JIZHICMS 2.5.3JIZHICMS 2.5.4JIZHICMS 2.5.5JIZHICMS 2.5.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116384Medium· 6.3Bdtask Garage 24 Garage Management Software Backend improper authorization
CVE-2026-116368High· 7.3DeepSeek Harness Browser Auth browser-auth.ts improper authorization
CVE-2026-114361Medium· 5.6HarnessRouter Identity Mode app.py improper authorization
CVE-2026-114249High· 7.3dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization
CVE-2026-114245High· 7.3dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization
CVE-2026-112045Medium· 5.4donetick History Deletion model.go CanDeleteHistory improper authorization