CVE-2026-4232

Tiandy Integrated Management Platform 7.17.0 is affected by a SQL injection in /rest/user/getAuthorityByUserId. The vulnerability is triggered by manipulating the userId argument, with network-level access and no required privileges or user interaction. The exploit is publicly disclosed and the v...