CVE-2026-96552

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions up to 627f426331da8086ce8fff2017d65b1ddef384f8

Description The User Password Handler component contains a flaw where the MD5.getMD5() function in the ssm pro/src/main/java/cn/sfturing/utils/MD5.java file implements a one-way hash without salt. This allows for remote attacks, although they require a high degree of complexity and are considered difficult to execute.

Recommendations As a temporary workaround, consider restricting the use of the MD5.getMD5() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.