CVE-2026-96881
Received Received - Intake

Improper Authorization in lin-cms-spring-boot

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: VulDB

Description
A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-96881
EUVD
EUVD-2026-85785

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
talelin lin-cms-spring-boot 0.2.1
talelin lin-cms-spring-boot to 0.2.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-285 The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper authorization issue in TaleLin lin-cms-spring-boot up to version 0.2.1. The BookController.java file's getBooks function lacks permission checks, allowing remote attackers to query all book information without authentication by accessing the /v1/book endpoint. The id parameter follows a predictable pattern, enabling enumeration of all books in the database.

Detection Guidance

Check if the /v1/book endpoint is accessible without authentication by sending a GET request to the URL. Use tools like curl or Postman to test the endpoint directly. Example command: curl -X GET http://<target-ip>:<port>/v1/book

Inspect the BookController.java file for the getBooks() method at line 54 to confirm the absence of permission verification logic.

Impact Analysis

Attackers can remotely access sensitive book data without authorization. Since the endpoint returns all book details, confidential information stored in the database may be exposed. The predictable id parameter allows attackers to systematically retrieve all records, increasing the risk of data leakage.

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations like GDPR or HIPAA by exposing sensitive data without proper authorization. Unauthorized access to personal or confidential information violates principles of data minimization, access control, and user consent required by these standards.

Mitigation Strategies

Immediately restrict access to the /v1/book endpoint by implementing proper authentication and authorization checks in the BookController.java file.

Update to a patched version of lin-cms-spring-boot if available, or apply a temporary fix by modifying the endpoint to require valid credentials.

Monitor network traffic for unauthorized access attempts to the /v1/book endpoint and block suspicious requests at the firewall level.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-96881. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart