CVE-2026-111354— crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints
Quick assessment
Affected
crmeb crmeb_java
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
crmeb_java 3.1 及之前版本存在一个授权绕过漏洞，允许已认证的用户通过提供其他用户的订单号来读取其订单信息。攻击者可以请求接口 或 来查看受害者的快递单号、物流轨迹、支付金额和商品明细。
Possible ATT&CK Techniques 1 AI
T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| crmeb | crmeb_java | ≤ 3.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-111354
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints
Source: CVE Program / CVE List V5
Vulnerability Description
crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{orderId} to view victims' tracking numbers, logistics traces, payment amounts and product lines.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| crmeb | crmeb_java | 0 ~ 3.1 | - |
|
II. Public POCs for CVE-2026-111354
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-111354
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-111354 (1)
IV. Related Vulnerabilities
Same vendor: crmeb
-
CVE-2026-111359
CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGif -
CVE-2026-85212
CRMEB through 6.0.0 Missing Authorization via Inert verifyAu -
CVE-2026-85177
CRMEB through 6.0.0 Unauthorized Message Modification via ed -
CVE-2026-10771
crmeb crmeb_java base64 Qrcode Endpoint RestTemplateUtil.jav
Same weakness: CWE-639
-
CVE-2026-92715
Tutor LMS <= 4.1.0 - Insecure Direct Object Reference to Aut -
CVE-2026-107762
Kirki <= 6.3.2 - Insecure Direct Object Reference to Unauthe -
CVE-2026-59963
Tandoor Recipes: Private recipe file and share-link authoriz -
CVE-2026-111722
LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/proj -
CVE-2026-111721
Open WES through 1.0.0 Broken Access Control via GlobalGatew
V. Comments for CVE-2026-111354
No comments yet