CVE-2026-96881
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A vulnerability in TaleLin lin-cms-spring-boot up to 0.2.1. The getBooks function in BookController.java of the book Endpoint leads to improper authorization. The attack can be launched remotely. The exploit has been publicly disclosed.
Risk Assessment
An attacker can retrieve the list of books without proper permissions, potentially leading to data disclosure or unauthorized operations.
Recommendation
Upgrade lin-cms-spring-boot to the latest version. Audit access controls and implement proper authorization mechanisms.
Other vulnerabilities in TaleLin lin-cms-spring-boot
Original NVD description (English source)
A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS