CVE Feed

    Dashboard / CVE / CVE-2026-110114

    CVE-2026-110114

    FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared goods_sku_index_01 index for all tenants and force full-table reloads, degrading search availability.

    Published:Oct 13, 2026
    Last Modified:Oct 22, 2026
    EPS:Oct 13, 2026
    EPSS Score:0.00407
    CVSS Score:6.5

    Affected Products

    Vendor
    Fj-oms
    Product
    Oms-erp

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High