CVE-2026-94412 — jshERP through 3.6 Authorization Bypass via resetPwd
jshERP through 3.6 contains an authorization bypass vulnerability in the POST /user/resetPwd endpoint that allows authenticated users to reset any other user's password. Attacke…
Published: 2026-09-21 · CVSS: 8.7 · CVSS 4.0
jshERP through 3.6 contains an authorization bypass vulnerability in the POST /user/resetPwd endpoint that allows authenticated users to reset any other user's password. Attackers can submit a request with an arbitrary target user ID to reset that account's password to a known default value, enabling unauthorized access to other user accounts including administrators.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7