THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19905 (HIGH 7.3) — A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendance_out_approve.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has b

[NVD] CVE-2026-19905 (HIGH 7.3) — A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendance_out_approve.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has b

mednvdPublished 2026-08-15

CVE-2026-19905 CVSS: 7.3 HIGH Published: 2026-08-15T19:16:32.300

A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendance_out_approve.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for

Indicators of compromise

CVE-2026-19905cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19905