Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-96549

sfturing hosp_order CommonUserServiceImpl.java cleartext storage

CVSS 4.0 4.8 MEDIUMCVSS 3.1 3.3 LOWCVSS 3.0 3.3 LOWCVSS 2.0 1.7 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-96549

Published

A vulnerability has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This vulnerability affects unknown code of the file ssm_pro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java. Such manipulation leads to cleartext storage of sensitive information. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-96549

Published

hosp_order

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "sfturing",
                    "product": "hosp_order",
                    "versions": [
                        {
                            "version": "627f426331da8086ce8fff2017d65b1ddef384f8",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:sfturing:hosp_order:*:*:*:*:*:*:*:*"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON