CVE-2026-10152

MediumCVSS 6.3

Published: 30/05/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

Vulnerability in lin-cms-spring-boot (TaleLin) up to version 0.2.1 allows improper access controls through manipulation in the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java, affecting the book Endpoint component.

Risk Assessment

An attacker can remotely gain unauthorized access to book management functions, potentially modifying or deleting data without proper permissions.

Recommendation

Apply available patches or temporarily restrict access to the book endpoint until an official fix is released.

Other vulnerabilities in lin-cms-spring-boot

CVE-2026-96880Medium
A vulnerability was found in TaleLin lin-cms-spring-boot up to version 0.2.1 in the getBook function of BookController. Manipulation of the ID argument leads to improper authorization. The attack can be performed remotely and the exploit has been published.

Original NVD description (English source)

A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1. This issue affects some unknown processing of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation results in improper access controls. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS