jeequan jeepay

• CVE-2026-111608 Medium 4.2 Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId} 0.3%
• CVE-2026-111607 High 7.1 Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs 0.2%
• CVE-2026-18631 Medium 6.3 jeequan jeepay PreAuthorize SysLogController.java WebSecurityConfig authorization 0.4%