Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: jeequan Clear all filters
TI-2026-75394 CVE-2026-111608 · GHSA-gfff-pw4q-26jh

Jeepay IDOR lets merchants delete other merchants' division receivers

Priority MEDIUM 45

Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting an ownership check on the wrong column.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00302 Published 2026-10-16 No fix listed CWE-639
TI-2026-75393 CVE-2026-111607 · GHSA-m4g4-x529-gqm8

Jeepay lets merchants overwrite other merchants' payment configs

Priority MEDIUM 64

Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another merchant application's payment channel configuration by supplying a victim inf…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-16 No fix listed CWE-639