CVE-2026-96550

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-96550
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-96550.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-96550
Published
2026-09-23T19:30:10Z
Modified
2026-10-08T02:52:43Z
Severity
  • 2.9 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
sfturing hosp_order MailUtil.java getProperties cleartext transmission
Details

A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue affects the function getProperties of the file ssm_pro/src/main/java/cn/sfturing/utils/MailUtil.java. Performing a manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is assessed as difficult. The exploit has been made public and could be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-310",
        "CWE-319"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/96xxx/CVE-2026-96550.json"
}
References

Affected packages

Git / github.com/sfturing/hosp_order

Affected ranges

Type
GIT
Repo
https://github.com/sfturing/hosp_order
Events
Introduced
627f426331da8086ce8fff2017d65b1ddef384f8
Last Affected
627f426331da8086ce8fff2017d65b1ddef384f8

Affected versions

Other
627f426331da8086ce8fff2017d65b1ddef384f8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-96550.json"