CVE-2026-90509 | dromara orion-visor up to 2.5.7 ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials (Issue 170)

A vulnerability categorized as critical has been discovered in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials.

This vulnerability is handled as CVE-2026-90509. The attack can be executed remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More