CVE-2026-2852: yeqifu warehouse Sales Endpoint SalesController.java deleteSales access control
A vulnerability was identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects the function addSales/updateSales/deleteSales of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\SalesController.java of the component Sales Endpoint. The manipulation leads to improper access controls. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2852?
CVE-2026-2852 is classified as a high severity vulnerability affecting the Sales Endpoint in the yeqifu warehouse.
What components are affected by CVE-2026-2852?
CVE-2026-2852 affects the addSales, updateSales, and deleteSales functions in the SalesController.java file of the yeqifu warehouse.
How do I fix CVE-2026-2852?
To mitigate CVE-2026-2852, upgrade to a version of yeqifu warehouse beyond aaf29962ba407d22d991781de28796ee7b4670e4.
When was CVE-2026-2852 disclosed?
CVE-2026-2852 was disclosed as part of a security assessment for the yeqifu warehouse project.
What platforms are vulnerable to CVE-2026-2852?
CVE-2026-2852 affects all versions of yeqifu warehouse up to and including aaf29962ba407d22d991781de28796ee7b4670e4.