CVE-2026-2079
Unknown Unknown - Not Provided
Improper Authorization in Yeqifu Menu Management via Remote Exploit

Publication date: 2026-02-07

Last updated on: 2026-04-29

Assigner: VulDB

Description
A flaw has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addMenu/updateMenu/deleteMenu of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\MenuController.java of the component Menu Management. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been published and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-07
Last Modified
2026-04-29
Generated
2026-06-16
AI Q&A
2026-02-07
EPSS Evaluated
2026-06-14
NVD
CVE-2026-2079
EUVD
EUVD-2026-5734
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
yeqifu warehouse to 2025-10-06 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-285 The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a flaw found in the yeqifu warehouse software affecting the Menu Management component, specifically the addMenu, updateMenu, and deleteMenu functions in the MenuController.java file. It allows an attacker to perform improper authorization, meaning they could manipulate these functions without proper permissions. The attack can be launched remotely, and an exploit for this vulnerability has already been published.

Impact Analysis

The vulnerability can lead to unauthorized manipulation of menu management functions, potentially allowing attackers to add, update, or delete menu entries without proper authorization. This could compromise the integrity of the system's menu data and potentially lead to further unauthorized actions or access within the affected software.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-2079. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart