CVE-2026-129455

The Zr.Admin.NET project (commits e6ceaf4 through eb9228a ) contains an Insecure Direct Object Reference (IDOR) vulnerability within the FrontArticleController component. This flaw allows authenticated users to manipulate the visibility and pin state of articles belonging to other users. Specific...

EUVD-2026-125957

Zr.Admin.NET commit e6ceaf4 through commit eb9228a contains an insecure direct object reference vulnerability in FrontArticleController that allows authenticated users to change other users' article visibility and pin state. Attackers can send PUT /front/article/changePublic with their own UserId...

PT-2026-147446

Zr.Admin.NET commit e6ceaf4 through commit eb9228a contains an insecure direct object reference vulnerability in FrontArticleController that allows authenticated users to change other users' article visibility and pin state. Attackers can send PUT /front/article/changePublic with their own UserId...

CVE-2026-129455: izhaorui Zr.Admin.NET: Zr.Admin.NET commit e6ceaf4 through commit eb9228a contains an insecure direct object reference vulnerability in…

Zr.Admin.NET commit e6ceaf4 through commit eb9228a contains an insecure direct object reference vulnerability in FrontArticleController that allows authenticated users to change other users' article visibility and pin state. Attackers can send PUT /front/article/changePublic with their own UserId...