Vulnerability Description
jshERP through 3.6 contains a tenant isolation bypass vulnerability that allows authenticated users to read other tenants' records via the GET /tenant/info endpoint. Attackers can iterate the primary key to enumerate and access sensitive tenant data including login names, validity dates, user quotas, and enabled state across all platform tenants.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/LinYuanyi1/cve-request-poc/blob/master/jshERP/poc-09-tenant-c
- https://github.com/jishenghua/jshERP
- https://github.com/jishenghua/jshERP/blob/v3.6/jshERP-boot/src/main/java/com/jsh
- https://www.vulncheck.com/advisories/jsherp-through-3.6-tenant-information-discl
FAQ
What is CVE-2026-94494?
CVE-2026-94494 is a vulnerability with a CVSS score of 5.0 (MEDIUM). jshERP through 3.6 contains a tenant isolation bypass vulnerability that allows authenticated users to read other tenants' records via the GET /tenant/info endpoint. Attackers can iterate the primary ...
How severe is CVE-2026-94494?
CVE-2026-94494 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-94494?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.