Improper Access Control in fushengqian fuint by Fushengqian

CVE-2026-124565

What is CVE-2026-124565?

A security vulnerability has been identified in fushengqian fuint, specifically within the Order Verification component and the confirm function of the MerchantOrderController.java file. This flaw enables unauthorized access due to inadequate controls, allowing attackers to engage in remote exploitation without proper restrictions. The product follows a rolling release model, making it challenging to ascertain which versions are affected or have been patched. Despite early notification to the vendor regarding this issue, there was no response.

References