CVE-2026-96551Proof of concept (PoC) published · CISA
sfturing hosp_order CommonUserController.java cross-site request forgery
CVSS score
5.3
EPSS probability
%0.2
Risk score
0.0
Published
19 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
6.9
CVE-2026-86262
sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization
S
Patch status unknownEPSS %1
5.3
CVE-2026-95396
sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting
S
Patch status unknownEPSS %0
6.3
CVE-2026-96548
sfturing hosp_order jdbc.properties hard-coded credentials
S
Patch status unknownEPSS %0
6.3
CVE-2026-96550
sfturing hosp_order MailUtil.java getProperties cleartext transmission
S
Patch status unknownEPSS %0
4.8
CVE-2026-96549
sfturing hosp_order CommonUserServiceImpl.java cleartext storage
S
Patch status unknownEPSS %0
2.3
CVE-2026-96552
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
S
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-96551"