CVE-2026-2075

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-2075
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2075.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-2075
Published
2026-02-07T05:02:08Z
Modified
2026-10-28T02:30:20Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
yeqifu warehouse Role-Permission Binding RoleController.java saveRolePermission access control
Details

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the function saveRolePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role-Permission Binding Handler. The manipulation results in improper access controls. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-266",
        "CWE-284"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2075.json"
}
References

Affected packages

Git / github.com/yeqifu/warehouse

Affected ranges

Type
GIT
Repo
https://github.com/yeqifu/warehouse
Events
Introduced
aaf29962ba407d22d991781de28796ee7b4670e4
Last Affected
aaf29962ba407d22d991781de28796ee7b4670e4
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "aaf29962ba407d22d991781de28796ee7b4670e4"
                },
                {
                    "last_affected":  "aaf29962ba407d22d991781de28796ee7b4670e4"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        }
    ]
}

Affected versions

Other
aaf29962ba407d22d991781de28796ee7b4670e4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2075.json"