CVE Feed

    Dashboard / CVE / CVE-2026-0574

    CVE-2026-0574

    A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified.

    Published:Jan 4, 2026
    Last Modified:Apr 18, 2026
    EPS:Jan 4, 2026
    EPSS Score:0.00048
    CVSS Score:6.3

    Affected Products

    Vendor
    Yeqifu
    Product
    Warehouse
    Vendor
    Yeqifu
    Product
    Warehouse Management System

    Exploits

    https://github.com/5i1encee/Vul/blob/main/Vertical_privilege_escalation_Vulnerability_in_Project_yeqifu_warehouse.mdhttps://github.com/5i1encee/Vul/blob/main/Vertical_privilege_escalation_Vulnerability_in_Project_yeqifu_warehouse.md#poc

    Related CVEs

    CVE-2026-18903 (CVSS 2.1) — A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue …
    CVE-2026-2852 (CVSS 2.1) — A vulnerability was identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue …
    CVE-2026-2851 (CVSS 2.1) — A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulner…
    CVE-2026-2850 (CVSS 2.1) — A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the…
    CVE-2026-2849 (CVSS 2.1) — A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by…
    CVE-2026-2107 (CVSS 2.1) — A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the…
    CVE-2026-2106 (CVSS 2.1) — A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacte…
    CVE-2026-2105 (CVSS 2.1) — A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The affected element…
    CVE-2026-2079 (CVSS 2.1) — A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability a…
    CVE-2026-2078 (CVSS 2.1) — A vulnerability was detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High