CVE-2026-97721
LowCVSS 2.7Summary
A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. The vulnerability affects the CmsContentAdminController function in SysUserAdminController.java within the exportExcel/exportData component. Manipulation of the userId/deptId arguments causes authorization bypass, and the attack can be initiated remotely. The exploit has been made publicly available and could be used for attacks.
Risk Assessment
An attacker can remotely bypass authorization controls and gain access to data or functions they should not be permitted to use. Because the exploit is publicly available, the risk of real-world exploitation is high.
Recommendation
Update PublicCMS to a patched version as soon as possible, or enforce additional authorization checks for the exportExcel/exportData component. Monitor logs for unusual data export requests.
Other vulnerabilities in PublicCMS
See allOriginal NVD description (English source)
A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData. This manipulation of the argument userId/deptId causes authorization bypass. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.