P4Verified

CVE-2026-110129: fuintCatering affected git revisions

CVE-2026-110129. CVSS 3.1 base score 6.5 (GitHub Advisory Database).

Affected technology

fuintCatering · 0 through 122c9e61a1bc7d947428b7c4f8be4faa76f38e11
fushengqian

Description’s affected range: through commit 122c9e6

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Attackers can register freely and enumerate sequential refundId values to obtain buyers' names, national ID numbers, addresses, WeChat openIds, and order details. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity and availability impact as none.

Published 13-Oct-2026 20:19 UTC

CWE: CWE-639
CCR priority: 26.0 /100 (P4)
CVSS 3.1: 6.5 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · GitHub Advisory Database
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-13 20:20:59.886514+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-13 20:16:59.278043+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-110129.html