A vulnerability classified as critical has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects the function
addSales/updateSales/deleteSales of the file datasetreposwarehousesrcmainjavacomyeqifubuscontrollerSalesController.java of the component Sales Endpoint. The manipulation leads to improper access controls.
This vulnerability is uniquely identified as CVE-2026-2852. The attack is possible to be carried out remotely. Moreover, an exploit is present.
This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified.
The project was informed of the problem early through an issue report but has not responded yet.
