CVE-2026-96882

MediumCVSS 5.3

Published: 24/09/2026(UTC)Updated: 29/09/2026(UTC)Translated: 24/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

19th percentile - higher than 19% of all known CVEs

Summary

A vulnerability in TaleLin lin-cms-spring-boot up to 0.2.1. The searchBook function in BookController.java of the book Endpoint leads to improper authorization. The attack can be launched remotely. The exploit is publicly available.

Risk Assessment

An attacker can access book search functionality without proper permissions, potentially leading to data disclosure or unauthorized operations.

Recommendation

Upgrade lin-cms-spring-boot to the latest version. Audit access controls and implement proper authorization mechanisms.

Other vulnerabilities in TaleLin lin-cms-spring-boot

CVE-2026-96881Medium
A vulnerability in TaleLin lin-cms-spring-boot up to 0.2.1. The getBooks function in BookController.java of the book Endpoint leads to improper authorization. The attack can be launched remotely. The exploit has been publicly disclosed.

Original NVD description (English source)

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS