2 matches found
CVE-2026-92600
Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysUser/detail and /sysUser/page endpoints omit requiredPermission configuration, causing the permission interceptor to skip RBAC validation for authenticated users. Attackers with any valid login toke...
7.1CVSS0.00422EPSS
SaveExploits0References5
CVE-2026-92600: Missing Authorization
Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysUser/detail and /sysUser/page endpoints omit requiredPermission configuration, causing the permission interceptor to skip RBAC validation for authenticated users. Attackers with any valid login toke...
7.1CVSS5.8AI score0.00422EPSS
SaveExploits0References2
20