CyberSecBulletin

Sfturing vulnerabilities

We track 4 vulnerabilities in Sfturing products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 7, 2026.

4vulnerabilities
0critical
4high
0exploited
7.7average CVSS score

Latest Sfturing vulnerabilities

  • 7.3 High severity

    hosp_order: Improper Authorization

    CVE-2026-86263Sfturing

    A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Cancella

  • 7.3 High severity

    hosp_order: Improper Authorization

    CVE-2026-86262Sfturing

    A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects the function updateOrderSta1/updateOrderdiseaseInfo of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the com

  • 7.3 High severity

    hosp_order: Improper Authorization

    CVE-2026-86261Sfturing

    A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executin

  • 8.8 High severity

    hosp_order: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2025-6766Sfturing

    A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. It has been declared as critical. This vulnerability affects the function getOfficeName of the file OfficeServiceImpl.java. The manipulation of the argument office