VulnSocial

CVE-2026-11435Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-06); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-06: 1Mentions · 2026-06-07: 1Technical Details · 2026-06-06: 106-0606-07
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-061
Disclosure1
2026-06-071
General1
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-11435 SQL Injection in Jinher OA 1.0 nextselectplan.aspx httpOID Parame... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11435 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4

    Post summary

    The content announces CVE-2026-11435 as a SQL injection flaw in Jinher OA 1.0, providing brief technical details without mentioning exploitation, patches, or a PoC.

    0001042
    4.0K followersView on X
  • CVE@CVEnew
    General

    CVE-2026-11435 A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpO… https://www.cve.org/CVERecord?id=CVE-2026-11435

    Post summary

    The excerpt merely announces CVE‑2026‑11435 in Jinher OA 1.0 with a brief reference to an unknown function, lacking any further technical or actionable details.

    00000174
    57.6K followersView on X

Explore more

Back to dashboard