CVE-2026-124569: fushengqian fuintCatering CommissionCashServiceImpl.java updateCommissionCash access control

Q: What level of access does an attacker need to exploit this issue?

The issue requires low-level privileges (PR:L). Exploitation can be performed remotely and does not require user interaction.

Q: What security impact can exploitation have?

Successful exploitation can affect integrity and availability at a low level. No confidentiality impact is indicated.

Q: Which releases are affected or fixed?

The affected code is reported in fuintCatering through commit 6d054f5788ac8645eb491f79242bb8a625efc133. Because the product uses rolling releases, specific affected and fixed version numbers are not available.

Q: Is a vendor fix or response available?

The available information states that the vendor was contacted before disclosure but did not respond. No vendor-provided remediation or fixed release is identified.

Published Nov 9, 2026

Updated

A vulnerability was found in fushengqian fuintCatering up to 6d054f5788ac8645eb491f79242bb8a625efc133. The affected element is the function updateCommissionCash of the file CommissionCashServiceImpl.java. The manipulation of the argument Status results in improper access controls. It is possible to launch the attack remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

fushengqian fuintCatering<=6d054f5788ac8645eb491f79242bb8a625efc133

Event History

Nov 9, 2026

CVE Published

via MITRE·05:15 AM

Data Sourced

via MITRE·05:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue requires low-level privileges (PR:L). Exploitation can be performed remotely and does not require user interaction.

What security impact can exploitation have?

Successful exploitation can affect integrity and availability at a low level. No confidentiality impact is indicated.

Which releases are affected or fixed?

The affected code is reported in fuintCatering through commit 6d054f5788ac8645eb491f79242bb8a625efc133. Because the product uses rolling releases, specific affected and fixed version numbers are not available.

Is a vendor fix or response available?

The available information states that the vendor was contacted before disclosure but did not respond. No vendor-provided remediation or fixed release is identified.

CVE-2026-124569: fushengqian fuintCatering CommissionCashServiceImpl.java updateCommissionCash access control

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What security impact can exploitation have?

Which releases are affected or fixed?

Is a vendor fix or response available?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What security impact can exploitation have?

Which releases are affected or fixed?

Is a vendor fix or response available?