CVE-2026-105621 in jshERP
Prediction
by VulDB Data Team • 10/05/2026
A security flaw has been discovered in <a href="/product/jishenghua:jsherp">jishenghua jshERP up to 3.5</a>. Affected is the function <code>updateAccountHeadAndDetail</code> of the file <em>jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java</em> of the component <em>Financial Receipt Update Handler</em>. Performing a manipulation results in improper authorization. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.