CVE-2026-96880
Received Received - Intake

Improper Authorization in lin-cms-spring-boot via Book Endpoint

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: VulDB

Description
A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-96880
EUVD
EUVD-2026-85772

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
talelin lin-cms-spring-boot to 0.2.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-285 The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper authorization issue in the TaleLin lin-cms-spring-boot up to version 0.2.1. It affects the getBook function in BookController.java, allowing remote attackers to access book details without authentication by manipulating the ID argument in the /v1/book/{id} endpoint. The flaw exists because the endpoint lacks proper permission checks.

Detection Guidance

Check if the /v1/book/{id} endpoint is accessible without authentication by sending a GET request to it. Use tools like curl or a browser to test access to URLs like /v1/book/1, /v1/book/2, etc. Monitor server logs for unauthorized access attempts to this endpoint.

Impact Analysis

An attacker could exploit this to retrieve sensitive book information from the database without authorization. Since the ID parameter follows a predictable pattern, they could enumerate through multiple IDs to access all stored book data. This could lead to data leaks or unauthorized access to confidential information.

Compliance Impact

This vulnerability could violate compliance requirements such as GDPR or HIPAA by allowing unauthorized access to sensitive data. GDPR mandates strict access controls for personal data, while HIPAA requires protection of health information. Exploiting this flaw could result in unauthorized data exposure, leading to legal and regulatory penalties.

Mitigation Strategies

Immediately update Lin-CMS Spring Boot to a patched version if available. If no patch exists, restrict access to the /v1/book/{id} endpoint by implementing authentication and authorization checks. Disable or remove the vulnerable BookController.getBook() method if not needed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-96880. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart