CyberSecBulletin

Jeequan vulnerabilities

We track 1 vulnerability in Jeequan products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Jeequan vulnerabilities

  • 7.1 High severity

    jeepay: Authorization Bypass Through User-Controlled Key

    CVE-2026-111607Jeequan

    Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another merchant application's payment channel configuration by supplying a victim infoId to MchPayInterfaceConfigController.s