A vulnerability marked as critical has been reported in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. Impacted is an unknown function of the file EmployeeController.java. The manipulation leads to improper authorization.
This vulnerability is traded as CVE-2026-2860. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
This product is distributed under two entirely different names. The project was informed of the problem early through an issue report but has not responded yet.
