CVE-2026-0574

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-0574
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-0574.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-0574
Published
2026-01-04T02:02:05Z
Modified
2026-10-28T02:30:55Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
yeqifu warehouse Request UserController.java saveUserRole improper authorization
Details

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-266",
        "CWE-285"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0574.json"
}
References

Affected packages

Git / github.com/5i1encee/vul

Affected ranges

Type
GIT
Repo
https://github.com/5i1encee/vul
Events
Introduced
aaf29962ba407d22d991781de28796ee7b4670e4
Last Affected
aaf29962ba407d22d991781de28796ee7b4670e4
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "aaf29962ba407d22d991781de28796ee7b4670e4"
                },
                {
                    "last_affected":  "aaf29962ba407d22d991781de28796ee7b4670e4"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        }
    ]
}

Affected versions

Other
aaf29962ba407d22d991781de28796ee7b4670e4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-0574.json"