CVE-2026-96550

Received Received - Intake

Cleartext Credential Transmission in Sfturing Hosp Order

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: VulDB

Description

A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue affects the function getProperties of the file ssm_pro/src/main/java/cn/sfturing/utils/MailUtil.java. Performing a manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is assessed as difficult. The exploit has been made public and could be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-09-23

Generated

2026-09-24

AI Q&A

2026-09-24

EPSS Evaluated

N/A

NVD

CVE-2026-96550

EUVD

EUVD-2026-85640

Affected Vendors & Products

Vendor	Product	Version / Range
sfturing	hosp_order	to 627f426331da8086ce8fff2017d65b1ddef384f8 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-319	The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
CWE-310	Cryptographic Issues

Attack-Flow Graph

Executive Summary

This vulnerability involves a flaw in the sfturing hosp_order system where sensitive information is transmitted in cleartext due to improper SMTP authentication. The MailUtil.java file fails to enforce TLS or STARTTLS, allowing attackers to intercept credentials and password-reset messages over the network.

Detection Guidance

Check if the application uses plaintext SMTP for authentication or password resets by inspecting network traffic. Use tools like Wireshark or tcpdump to capture SMTP traffic and look for unencrypted credentials or reset messages. Verify if the MailUtil.java file lacks TLS/STARTTLS configuration in the application's SMTP settings.

Impact Analysis

An attacker on the same network could capture passwords, reset codes, or other sensitive data sent via email. This could lead to unauthorized account access, data breaches, or identity theft if credentials are compromised.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA requirements for secure transmission of personal and health data. Cleartext transmission of sensitive information conflicts with encryption mandates, potentially leading to non-compliance and legal penalties.

Mitigation Strategies

Enable TLS or STARTTLS in the SMTP configuration before authentication. Ensure mail.smtp.starttls.enable is set to true. Validate server certificates and enforce secure transport. Rotate SMTP passwords after applying fixes. Block plaintext SMTP traffic if possible.

Hi! I’m here to help you understand CVE-2026-96550. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70