{"schema":"vulnpedia.research/1","cve":"CVE-2026-109187","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/jshERP/poc_global_config_and_enumeration.py","tags":["exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:46.387Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:46.387Z","url":"https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/jshERP/poc_global_config_and_enumeration.py"},{"source":"nvd","sourceId":"CVE-2026-109187","modified":"2026-10-14T18:17:32.953","url":"https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/jshERP/poc_global_config_and_enumeration.py"}]},{"url":"https://github.com/jishenghua/jshERP/blob/8f28e7c2fe54d54de3621a414f5df1833dc5a55f/jshERP-boot/src/main/java/com/jsh/erp/controller/PlatformConfigController.java#L201-L216","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:46.387Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:46.387Z","url":"https://github.com/jishenghua/jshERP/blob/8f28e7c2fe54d54de3621a414f5df1833dc5a55f/jshERP-boot/src/main/java/com/jsh/erp/controller/PlatformConfigController.java#L201-L216"},{"source":"nvd","sourceId":"CVE-2026-109187","modified":"2026-10-14T18:17:32.953","url":"https://github.com/jishenghua/jshERP/blob/8f28e7c2fe54d54de3621a414f5df1833dc5a55f/jshERP-boot/src/main/java/com/jsh/erp/controller/PlatformConfigController.java#L201-L216"}]},{"url":"https://github.com/jishenghua/jshERP/blob/8f28e7c2fe54d54de3621a414f5df1833dc5a55f/jshERP-boot/src/main/java/com/jsh/erp/service/PlatformConfigService.java#L154-L171","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:46.387Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:46.387Z","url":"https://github.com/jishenghua/jshERP/blob/8f28e7c2fe54d54de3621a414f5df1833dc5a55f/jshERP-boot/src/main/java/com/jsh/erp/service/PlatformConfigService.java#L154-L171"},{"source":"nvd","sourceId":"CVE-2026-109187","modified":"2026-10-14T18:17:32.953","url":"https://github.com/jishenghua/jshERP/blob/8f28e7c2fe54d54de3621a414f5df1833dc5a55f/jshERP-boot/src/main/java/com/jsh/erp/service/PlatformConfigService.java#L154-L171"}]},{"url":"https://www.vulncheck.com/advisories/jsherp-through-3.6-information-disclosure-via-platformconfig-getinfobykey","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:46.387Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-12T13:10:46.387Z","url":"https://www.vulncheck.com/advisories/jsherp-through-3.6-information-disclosure-via-platformconfig-getinfobykey"},{"source":"nvd","sourceId":"CVE-2026-109187","modified":"2026-10-14T18:17:32.953","url":"https://www.vulncheck.com/advisories/jsherp-through-3.6-information-disclosure-via-platformconfig-getinfobykey"}]},{"source":"euvd","sourceId":"EUVD-2026-97391","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97391","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-97391","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97391"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}