https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2852.htmlhttps://patchthecve.com/cve/CVE-2026-2852.htmlWed, 17 Jun 2026 10:31:53 +0000MEDIUM 6.3: A vulnerability was identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects the function addSales/updateSales/deleteSales of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\SalesController.java of the component Sales Endpoint. The mahttps://patchthecve.com/cve/CVE-2026-2851.htmlhttps://patchthecve.com/cve/CVE-2026-2851.htmlWed, 17 Jun 2026 10:31:52 +0000MEDIUM 6.3: A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addInport/updateInport/deleteInport of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\InportController.java of the component Inport Endhttps://patchthecve.com/cve/CVE-2026-2850.htmlhttps://patchthecve.com/cve/CVE-2026-2850.htmlWed, 17 Jun 2026 10:31:52 +0000MEDIUM 6.3: A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint. Pehttps://patchthecve.com/cve/CVE-2026-2849.htmlhttps://patchthecve.com/cve/CVE-2026-2849.htmlWed, 17 Jun 2026 10:31:52 +0000MEDIUM 5.4: A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function deleteCache/removeAllCache/syncCache of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\CacheController.java of the component Cache Sync https://patchthecve.com/cve/CVE-2026-2107.htmlhttps://patchthecve.com/cve/CVE-2026-2107.htmlWed, 17 Jun 2026 10:30:19 +0000MEDIUM 6.3: A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\LoginfoController.java of the component Log Info Handlerhttps://patchthecve.com/cve/CVE-2026-2106.htmlhttps://patchthecve.com/cve/CVE-2026-2106.htmlWed, 17 Jun 2026 10:30:19 +0000MEDIUM 6.3: A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDeleteNotice of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\NoticeController.java of the compohttps://patchthecve.com/cve/CVE-2026-2105.htmlhttps://patchthecve.com/cve/CVE-2026-2105.htmlWed, 17 Jun 2026 10:30:19 +0000MEDIUM 6.3: A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The affected element is the function addDept/updateDept/deleteDept of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\DeptController.java of the component Department Management. Executihttps://patchthecve.com/cve/CVE-2026-2079.htmlhttps://patchthecve.com/cve/CVE-2026-2079.htmlWed, 17 Jun 2026 10:30:16 +0000MEDIUM 6.3: A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addMenu/updateMenu/deleteMenu of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\MenuController.java of the component Menu Management. Executing https://patchthecve.com/cve/CVE-2026-2078.htmlhttps://patchthecve.com/cve/CVE-2026-2078.htmlWed, 17 Jun 2026 10:30:16 +0000MEDIUM 6.3: A vulnerability was detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addPermission/updatePermission/deletePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\PermissionController.java of the component Permissionhttps://patchthecve.com/cve/CVE-2026-2077.htmlhttps://patchthecve.com/cve/CVE-2026-2077.htmlWed, 17 Jun 2026 10:30:15 +0000MEDIUM 6.3: A security vulnerability has been detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function addRole/updateRole/deleteRole of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role Mahttps://patchthecve.com/cve/CVE-2026-2076.htmlhttps://patchthecve.com/cve/CVE-2026-2076.htmlWed, 17 Jun 2026 10:30:15 +0000MEDIUM 6.3: A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this vulnerability is the function addUser/updateUser/deleteUser of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component User Managehttps://patchthecve.com/cve/CVE-2026-2075.htmlhttps://patchthecve.com/cve/CVE-2026-2075.htmlWed, 17 Jun 2026 10:30:15 +0000MEDIUM 6.3: A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role-Permission Binding Handler. The mahttps://patchthecve.com/cve/CVE-2026-0574.htmlhttps://patchthecve.com/cve/CVE-2026-0574.htmlWed, 17 Jun 2026 10:10:58 +0000MEDIUM 6.3: A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper authorizatiohttps://patchthecve.com/cve/CVE-2026-0571.htmlhttps://patchthecve.com/cve/CVE-2026-0571.htmlWed, 17 Jun 2026 10:10:58 +0000MEDIUM 4.3: A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path travehttps://patchthecve.com/cve/CVE-2025-15432.htmlhttps://patchthecve.com/cve/CVE-2025-15432.htmlWed, 07 Oct 2026 11:10:00 +0000MEDIUM 5.3: A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This vulnerability affects the function downloadShowFile of the file /file/downloadShowFile.action of the component com.yeqifu.sys.controller.FileController. The manipulation of the argument path leadshttps://patchthecve.com/cve/CVE-2025-65879.htmlhttps://patchthecve.com/cve/CVE-2025-65879.htmlFri, 25 Sep 2026 23:10:00 +0000HIGH 8.1: Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods endpoint accepts a user-controlled goodsimg parameter, which is directly concatenated with the server's UPLOAD_PATH and passed to File.delete() without validation. A remote authenthttps://patchthecve.com/cve/CVE-2025-65878.htmlhttps://patchthecve.com/cve/CVE-2025-65878.htmlFri, 25 Sep 2026 23:10:00 +0000HIGH 7.5: The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint `/file/showImageByPath` does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to the