CVE-2026-90521

A remote authorization bypass vulnerability was identified in the jaychouchannel Tourism-Management-System (a GitHub-based project using rolling releases), affecting the file MenpiaodingdanController.java within the CRUD component. The root cause is the manipulation of the ID argument , which all...