A vulnerability has been found in Qihang wms and classified as critical. Affected is an unknown function of the file ShopOrderImportController.java. The manipulation leads to unrestricted upload.
This vulnerability is uniquely identified as CVE-2026-37430. The attack is possible to be carried out remotely. No exploit exists.