CVE-2026-0571

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path traversal. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.

• CWE-22

• https://github.com/5i1encee/Vul/blob/main/Arbitrary%20File%20Read%20Vulnerability%20in%20Project%20yeqifu%20warehouse.mdExploit, Third Party Advisory
• https://github.com/5i1encee/Vul/blob/main/Arbitrary%20File%20Read%20Vulnerability%20in%20Project%20yeqifu%20warehouse.md#pocExploit
• https://vuldb.com/?ctiid.339385Permissions Required, VDB Entry
• https://vuldb.com/?id.339385Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.729331Third Party Advisory, VDB Entry
• https://github.com/5i1encee/Vul/blob/main/Arbitrary%20File%20Read%20Vulnerability%20in%20Project%20yeqifu%20warehouse.mdExploit, Third Party Advisory

Published

Jan 2, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0565A weakness has been identified in code-projects Content Mana…9.8
• CVE-2026-0566A security vulnerability has been detected in code-projects …9.8
• CVE-2026-0567A vulnerability was detected in code-projects Content Manage…9.8
• CVE-2026-0568A flaw has been found in code-projects Online Music Site 1.0…9.8
• CVE-2026-0569A vulnerability has been found in code-projects Online Music…9.8
• CVE-2026-0570A vulnerability was found in code-projects Online Music Site…9.8
• CVE-2026-0572The WebPurify Profanity Filter plugin for WordPress is vulne…6.5
• CVE-2026-0573An URL redirection vulnerability was identified in GitHub En…9
• CVE-2026-0574A weakness has been identified in yeqifu warehouse up to aaf…8.8
• CVE-2026-0575A security vulnerability has been detected in code-projects …9.8
• CVE-2026-0576A vulnerability was detected in code-projects Online Product…9.8
• CVE-2026-0577A flaw has been found in code-projects Online Product Reserv…9.8