fushengqian CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM fushengqian CVE published 2026-10-16

CVE-2026-111705

CVE-2026-111705 is an insecure direct object reference vulnerability in Fuint through commit 57ec018. The vulnerability allows authenticated members to read other members' booking records by manipulating the bookId parameter in the /clientApi/book/myBookDetail endpoint. This issue was publicly disclosed on October 16, 2026, and last modified on October 19, 2026.