CVE-2026-107828

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-107828
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-107828.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-107828
Published
2026-10-08T21:51:32Z
Modified
2026-10-11T07:04:26Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Login
Details

Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable credentials from public Weibo user IDs. OAuthAccountServiceImp.transferSina() sets the password to the first four digits of the Weibo ID, letting attackers log in through normal form login to read or post as victims.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-1391"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-107828.json"
}
References

Affected packages

Git / github.com/banq/jivejdon

Affected ranges

Type
GIT
Repo
https://github.com/banq/jivejdon
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
910fafbfa718d0a2be6bb034fa02bcbb580bd731
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "5.0"
        },
        {
            "fixed":  "5.0"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-107828.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "7978373696710798170237061069043931066",
            "length":  200
        },
        "id":  "CVE-2026-107828-10a379ab",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/banq/jivejdon/commit/910fafbfa718d0a2be6bb034fa02bcbb580bd731",
        "target":  {
            "file":  "src/com/jdon/jivejdon/manager/mapreduce/ThreadApprovedNewList.java",
            "function":  "init"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "333860100309000275166928495311066973273",
                "30374915342250970483952060235316732239",
                "81414220211742601704501984076563483847",
                "244416318735342282021764486528743115723",
                "167518763580457859731317481743166481880",
                "271811835294668748424500623578188102863",
                "204948462349554106346462956643280388044",
                "97713261130110039020207586332188831138",
                "309120669949091627681488697821745157699",
                "122748421947153433519081177395231259875",
                "274218177332917631892721971919088235599",
                "41599629172191896058670402327105764117"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-107828-4ff44e2f",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/banq/jivejdon/commit/910fafbfa718d0a2be6bb034fa02bcbb580bd731",
        "target":  {
            "file":  "src/com/jdon/jivejdon/manager/mapreduce/ThreadApprovedNewList.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "59108126195409344060918265431689748972",
            "length":  137
        },
        "id":  "CVE-2026-107828-93c70820",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/banq/jivejdon/commit/910fafbfa718d0a2be6bb034fa02bcbb580bd731",
        "target":  {
            "file":  "src/com/jdon/jivejdon/model/query/specification/ApprovedListSpec.java",
            "function":  "isGoodBlog"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "185872278007795743557176473001778055140",
                "59525279059624323695607473526051408613",
                "83836500981196697398857103665689467409",
                "121042032624974575198768221417924276931",
                "14004420241609524477760040696659733821",
                "263304077165190376358226209903951123852",
                "49024321835583048676978449252886730798",
                "100467887348313484870724408666892608408"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-107828-a326d684",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/banq/jivejdon/commit/910fafbfa718d0a2be6bb034fa02bcbb580bd731",
        "target":  {
            "file":  "src/com/jdon/jivejdon/model/query/specification/ApprovedListSpec.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "147664211641395977390983720950410247303",
            "length":  197
        },
        "id":  "CVE-2026-107828-c28eb86c",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/banq/jivejdon/commit/910fafbfa718d0a2be6bb034fa02bcbb580bd731",
        "target":  {
            "file":  "src/com/jdon/jivejdon/manager/mapreduce/ThreadApprovedNewList.java",
            "function":  "start"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "162596087330417603063677428201438723389",
            "length":  122
        },
        "id":  "CVE-2026-107828-d0745307",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/banq/jivejdon/commit/910fafbfa718d0a2be6bb034fa02bcbb580bd731",
        "target":  {
            "file":  "src/com/jdon/jivejdon/model/query/specification/ApprovedListSpec.java",
            "function":  "isExcelledDiscuss"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "208972022311035733844886350694903749572",
            "length":  37
        },
        "id":  "CVE-2026-107828-fd0b7e4d",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/banq/jivejdon/commit/910fafbfa718d0a2be6bb034fa02bcbb580bd731",
        "target":  {
            "file":  "src/com/jdon/jivejdon/manager/mapreduce/ThreadApprovedNewList.java",
            "function":  "run"
        }
    }
]
vanir_signatures_modified 
"2026-10-11T07:04:26Z"