Browse all 8 CVE security advisories affecting cjbi. AI-powered Chinese analysis, POCs, and references for each vulnerability.
CJBI develops enterprise software for supply chain management and logistics operations. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and access control flaws. While no major public security incidents have been widely documented, the four CVEs associated with CJBI highlight consistent issues with authentication mechanisms and insecure default configurations. Their security posture appears typical for enterprise software vendors, with vulnerabilities primarily affecting exposed web interfaces and API endpoints rather than core processing systems.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-92920 | admin3 through 3.0.0 Session Not Invalidated When a User Account Is Disabled — admin3 CWE-613 | 5.4 | Medium | 2026-09-17 |
| CVE-2026-92921 | admin3 through 3.0.0 Weak Password Hashing via Single-Round MD5 — admin3 CWE-916 | 4.9 | Medium | 2026-09-17 |
| CVE-2026-92919 | admin3 through 3.0.0 Arbitrary File Write via Path Traversal in Storage Upload Filename — admin3 CWE-22 | 8.1 | High | 2026-09-17 |
| CVE-2026-92918 | admin3 through 3.0.0 Session Token Disclosure via Audit Log — admin3 CWE-532 | 8.8 | High | 2026-09-17 |
This page lists every published CVE security advisory associated with cjbi. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.