PT-2026-24052 · Unknown · Opencc Jflow

Maoqiu · Published 2026-03-09 · Updated 2026-03-09 · CVE-2026-3813

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions opencc JFlow versions prior to 5badc00db382d7cb82dad231e6a866b18e0addfe

Description A flaw exists in opencc JFlow that allows for injection. This manipulation can be performed remotely. The vulnerable component is the Calculate function within the src/main/java/bp/wf/httphandler/WF CCForm.java file. The project has been notified of the issue but has not yet responded. A public exploit is available.

Recommendations Apply updates as they become available through the rolling release system. As a temporary workaround, consider restricting access to the WF CCForm.java file. Disable or restrict the use of the Calculate function until a patch is available.

Exploit

Fix

Command Injection

Improper Neutralization

Special Elements Injection

Weakness Enumeration

CWE-77

CWE-707

CWE-74

Related Identifiers

CVE-2026-3813

Affected Products

Opencc Jflow

References · 8

• 🔥 https://gitee.com/opencc/JFlow/issues/IE8R2F · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3813 · Security Note
• https://gitee.com/opencc/JFlow · Note
• https://vuldb.com/?submit.769112 · Note
• https://t.me/CVEtracker/46890 · Telegram Post
• https://vuldb.com/?id.349779 · Note
• https://vuldb.com/?ctiid.349779 · Note
• https://twitter.com/CVEnew/status/2031122547979288769 · Twitter Post