PT-2026-46067 · Crmeb · Crmeb Java

Mukyuuhate · Published 2026-06-03 · Updated 2026-06-03 · CVE-2026-10771

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in crmeb crmeb java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-10771

Affected Products

Crmeb Java

References · 7

• 🔥 https://github.com/crmeb/crmeb_java/issues/35 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10771 · Security Note
• https://vuldb.com/cve/CVE-2026-10771 · Note
• https://github.com/crmeb/crmeb_java · Note
• https://vuldb.com/submit/831421 · Note
• https://vuldb.com/vuln/368137 · Note
• https://vuldb.com/vuln/368137/cti · Note