Improper Access Control in fushengqian fuintCatering Software
CVE-2026-124569

5.3MEDIUM

Key Information:

Vendor

Fushengqian

Status
Fuintcatering
Vendor
CVE Published:
9 November 2026

What is CVE-2026-124569?

A vulnerability exists in fushengqian's fuintCatering software that allows improper access control due to manipulation of the 'Status' argument in the 'updateCommissionCash' function within the 'CommissionCashServiceImpl.java' file. This flaw can be exploited remotely, potentially allowing unauthorized users to access sensitive functionalities. The vendor's method of rolling releases for continuous delivery means specific version details are not disclosed for the affected and patched releases. Attempts to communicate with the vendor regarding this vulnerability have gone unanswered.

Affected Version(s)

fuintCatering 6d054f5788ac8645eb491f79242bb8a625efc133

References

https://vuldb.com/vuln/432901
vdb-entrytechnical-description
https://vuldb.com/vuln/432901/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-124569
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Y1Daa (VulDB User)
VulDB CNA Team
.