CVE-2026-1062

A flaw has been found in xiweicheng TMS up to 2.28.0. This affects the function Summary of the file src/main/java/com/lhjz/portal/util/HtmlUtil.java. This manipulation of the argument url causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been published and may be used.

• CWE-918

• https://github.com/bkglfpp/CVE-md/blob/main/%E5%95%86%E6%88%B7%E5%95%86%E5%9F%8E%E2%80%94%E5%95%86%E5%9F%8E%E5%BC%80%E5%8F%91tms/SSRF%EF%BC%881%EF%BC%89.mdExploit, Third Party Advisory
• https://github.com/bkglfpp/CVE-md/blob/main/%E5%95%86%E6%88%B7%E5%95%86%E5%9F%8E%E2%80%94%E5%95%86%E5%9F%8E%E5%BC%80%E5%8F%91tms/SSRF%EF%BC%882%EF%BC%89.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.341630Permissions Required, VDB Entry
• https://vuldb.com/?id.341630Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.731241Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.731242Third Party Advisory, VDB Entry

Published

Jan 17, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1061A vulnerability was detected in xiweicheng TMS up to 2.28.0.…9.8
• CVE-2026-10610Local privilege escalation potentially allowed an attacker t…8.5
• CVE-2026-10611An authentication bypass vulnerability exists in MISP when L…10
• CVE-2026-10616A weakness has been identified in nextlevelbuilder GoClaw up…4.3
• CVE-2026-10617A security vulnerability has been detected in nextlevelbuild…7.3
• CVE-2026-10619A vulnerability was detected in sayan365 student-management-…7.3
• CVE-2026-10620A flaw has been found in code-projects Student Admission Sys…7.3
• CVE-2026-10621Path traversal in restore handler in Collibra Agent, allows …7.5
• CVE-2026-10622Improper Authentication in REST API in Collibra Agent, allow…8.2
• CVE-2026-10623The PressPrimer Quiz – AI Quiz Maker, Exam Builder & LMS Ass…4.3
• CVE-2026-10624A vulnerability has been found in SourceCodester Human Resou…4.3
• CVE-2026-10628The Points and Rewards for WooCommerce plugin for WordPress …4.3