CVE-2026-79571

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...

CVE-2026-79571

CVE-2026-79571 is a critical incorrect access control vulnerability in the SellerAuthorizeAspect component of springboot-project v1.0.0 . Unauthenticated attackers can bypass authorization to access all seller management interfaces, including listing products and orders, putting products on/off s...

CVE-2026-79571

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...

EUVD-2026-72849

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...

Qianniu has a dll hijacking vulnerability

Qianniu is a new one-stop seller management background launched by Alibaba Group in order to make it easier for sellers to take care of their stores after the original seller background system has been integrated and technologically upgraded. There is a dll hijacking vulnerability in Qianniu, whi...