CVE-2026-31272

MRCMS 3.1.2 is affected by an access control vulnerability originating from a lack of proper authorization validation in the save() method located at src/main/java/org/marker/mushroom/controller/UserController.java. This flaw allows an unauthenticated attacker to directly add super administrator ...