CVE-2026-2863

MEDIUM 5.4

feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java deleteFile path traversal

CVSS Score

5.4

EPSS Score

0.0%

EPSS Percentile

0th

A flaw has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. The impacted element is the function deleteFile of the file FileServiceImpl.java. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. This product is distributed under two entirely different names. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-22
Vendor	feng_ha_ha
Product	ssm-erp
Published	Feb 21, 2026
Last Updated	Feb 23, 2026

Stay Ahead of the Next One

Get instant alerts for feng_ha_ha ssm-erp

Be the first to know when new medium vulnerabilities affecting feng_ha_ha ssm-erp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

feng_ha_ha / ssm-erp

4288d53bd35757b27f2d070057aefb2c07bdd097

feng_ha_ha / production_ssm

4288d53bd35757b27f2d070057aefb2c07bdd097

megagao / ssm-erp

4288d53bd35757b27f2d070057aefb2c07bdd097

megagao / production_ssm

4288d53bd35757b27f2d070057aefb2c07bdd097

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/?id.347102 vuldb.com: https://vuldb.com/?ctiid.347102 vuldb.com: https://vuldb.com/?submit.754530 github.com: https://github.com/megagao/production_ssm/issues/37 github.com: https://github.com/megagao/production_ssm/issues/37#issue-3914979380

Credits

🔍 Jszdk (VulDB User)