Manipulation Vulnerability in fushengqian fuint Alipay Callback Handler

CVE-2026-124566

What is CVE-2026-124566?

A manipulation vulnerability has been identified in the fushengqian fuint system, specifically within the aliPayCallback function in the ClientPayController.java file. This vulnerability allows remote attackers to modify the enforcement of behavioral workflows, potentially causing undesirable operations. The product follows a rolling release strategy, which means that specific version details for affected or updated releases remain undefined. Despite early notification to the vendor regarding this security issue, there has been no response to address the concern.

References