VULNERABILITY INTELLIGENCE

CVE-2026-37430

CVSS score7.3 HIGH

EPSS probability0.28%

CISA KEVNot currently listed

Published2026-05-13

Last modified2026-06-17

Description

An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms commit 75c15a allows attackers to execute arbitrary code via uploading a crafted file.