EUVD-2026-125617

paicoding 1.0.3 contains a missing authorization vulnerability in the ArticleRestController article detail endpoint that allows unauthenticated attackers to read restricted articles. Attackers can enumerate article IDs via GET /article/api/data/detail/articleId to retrieve full content of paid,...

CVE-2026-129143

The paicoding 1.0.3 software contains a missing authorization vulnerability in the ArticleRestController article detail endpoint. This flaw allows unauthenticated attackers to bypass access controls and read restricted content by enumerating article IDs via the GET /article/api/data/detail/{artic...