4
CVEs
0
Critical
0
High
0
KEV
4
PoC
0
Unpatched C/H
0.0%
Patch Rate
0.4%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
4
LOW
0
Monthly CVE Trend
Affected Products (2)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-86260 | Unverified password change in sfturing hosp_order allows unauthenticated remote attackers to arbitrarily modify any user's password through the `modifyPassWord` function in `CommonUserController.java`. The Password Recovery component fails to validate the requester's identity or current credentials before accepting a new password, enabling full account takeover without prior authentication. A public exploit has been released via the project's GitHub issue tracker, and the vendor has not responded to the disclosure. | MEDIUM | 5.5 | 0.4% | 48 |
PoC
No patch
|
| CVE-2026-86261 | Authorization bypass through user-controlled key (IDOR, CWE-639) in sfturing hosp_order's OrderController allows unauthenticated remote attackers to access or manipulate hospital order records belonging to arbitrary users by supplying a crafted `userIdenf` parameter. The affected codebase is a Java Spring-based hospital order management system, and the vulnerability is exposed via the `/ssm_pro` web application endpoint. A public proof-of-concept exists via GitHub issue #114; the maintainer has not responded to the disclosure, and no patch has been released. | MEDIUM | 5.5 | 0.4% | 48 |
PoC
No patch
|
| CVE-2026-86263 | Authorization bypass in sfturing hosp_order exposes its order cancellation endpoint to manipulation of the ID parameter, allowing an attacker to cancel medical orders belonging to any patient without owning those records (CWE-639 IDOR). The vulnerable function is orderRecordsService.cancelOrder in OrderController.java within this Java/SSM-stack hospital management application. A public exploit is documented in GitHub issue #116; the project maintainer has not responded to the disclosure, leaving no remediated version available. | MEDIUM | 5.5 | 0.4% | 48 |
PoC
No patch
|
| CVE-2026-86262 | Authorization bypass in sfturing hosp_order allows unauthenticated remote attackers to modify hospital order records belonging to arbitrary users by supplying attacker-controlled `userID` or `id` parameters to the `updateOrderSta1` and `updateOrderdiseaseInfo` endpoints in OrderController.java. A public proof-of-concept exploit was disclosed via GitHub issue #115; the maintainer has not responded to the report. The project follows a rolling release strategy, making version-pinned remediation guidance impossible - all commits through 627f426331da8086ce8fff2017d65b1ddef384f8 are confirmed affected. | MEDIUM | 5.5 | 0.4% | 48 |
PoC
No patch
|