{"vulnerability": "cve-2026-94501", "sightings": [{"uuid": "79c08078-3122-4a57-99a7-2356a8a728f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94501", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2ivod5ko2b", "content": "\ud83d\udfe0 CVE-2026-94501 - High (8.8)\n\njshERP through 3.6 contains an authorization bypass vulnerability in the userBusiness CRUD endpoi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94501/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-21T20:01:31.733432Z"}, {"uuid": "11f7151e-e36b-4059-b575-11da51aaa948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94501", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw5wvr4ske2o", "content": "CVE-2026-94501 - jsherp\nIn jshERP versions up to 3.6, a logged\u2011in user can use the system\u2019s create, edit and delete functions to modify the role assignments of any account without proper checks. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsherp #jishenghua #CVE #infosec", "creation_timestamp": "2026-09-23T04:50:05.052999Z"}]}