CVE-2026-86261: Authorization Bypass in sfturing hosp_order

This vulnerability exists in sfturing hosp_order up to commit 627f426331da8086ce8fff2017d65b1ddef384f8 within an unknown function of the OrderController.java file. By manipulating the userIdenf argument, an attacker can bypass authorization checks remotely. The product's rolling release model prevents precise version identification. The vulnerability was responsibly disclosed but remains unaddressed by the vendor. Public exploit code is available, increasing the risk of exploitation.

Successful exploitation allows remote attackers to bypass authorization controls, potentially granting unauthorized access to protected resources or operations within the hosp_order system. This could lead to unauthorized data access or manipulation depending on the privileges associated with the bypassed authorization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. In the meantime, consider implementing additional access controls or monitoring to detect suspicious activity involving the userIdenf parameter.