Beveiligingsadvies

CVE-2026-31271

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-07 00:00:00

Laatst bijgewerkt 2026-04-09 14:01:47

Toegewezen door mitre

CVSS-score 9.8

Status PUBLISHED

Beschrijving

megagao production_ssm v1.0 contains an authorization bypass vulnerability in the user addition functionality. The insert() method in UserController.java lacks authentication checks, allowing unauthenticated attackers to create super administrator accounts by directly accessing the /user/insert endpoint. This leads to complete system compromise.

← Alle CVE's bekijken Bekijk op cve.org ↗