CVE-2026-96550

LOW 3.7

sfturing hosp_order MailUtil.java getProperties cleartext transmission

CVSS Score

3.7

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue affects the function getProperties of the file ssm_pro/src/main/java/cn/sfturing/utils/MailUtil.java. Performing a manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is assessed as difficult. The exploit has been made public and could be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-319 CWE-310
Vendor	sfturing
Product	hosp_order
Published	Sep 23, 2026

Stay Ahead of the Next One

Get instant alerts for sfturing hosp_order

Be the first to know when new low vulnerabilities affecting sfturing hosp_order are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

sfturing / hosp_order

627f426331da8086ce8fff2017d65b1ddef384f8

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/408952 vuldb.com: https://vuldb.com/vuln/408952/cti vuldb.com: https://vuldb.com/cve/CVE-2026-96550 vuldb.com: https://vuldb.com/submit/907906 github.com: https://github.com/sfturing/hosp_order/issues/121 github.com: https://github.com/sfturing/hosp_order/

Credits

🔍 zbzz (VulDB User) VulDB CNA Team