CVE-2026-93961
Received Received - Intake

Improper Authorization in Dromara UJCMS

Publication date: 2026-09-20

Last updated on: 2026-09-20

Assigner: VulDB

Description
A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api/UserController.java of the component UserController. Performing a manipulation of the argument Username results in improper authorization. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-20
Last Modified
2026-09-20
Generated
2026-09-20
AI Q&A
2026-09-20
EPSS Evaluated
N/A
NVD
CVE-2026-93961
EUVD
EUVD-2026-83650

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dromara ujcms to 12.3.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-285 The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a user enumeration flaw in Dromara UJCMS versions up to 12.3.1. It exists in the UserController class where endpoints like /username-exist check if a username exists without proper authorization. Attackers can remotely query these endpoints to determine valid usernames, potentially aiding in brute force or targeted attacks.

Detection Guidance

Check if the affected endpoints (/username-exist, /username-not-exist, /mobile-exist, /mobile-not-exist, /email-exist, /email-not-exist) are accessible without authentication. Use tools like curl to send requests to these endpoints and verify if they return user existence information without requiring login.

Impact Analysis

This vulnerability allows attackers to remotely enumerate valid usernames by querying specific endpoints without authentication. This can lead to targeted attacks, credential stuffing, or social engineering attempts using identified usernames. Systems relying on UJCMS for user management may expose user information.

Mitigation Strategies

Apply proper permission controls to the affected endpoints by adding authentication and authorization checks. Ensure endpoints require valid user credentials or roles before processing requests. Monitor for unauthorized access attempts to these endpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93961. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart