CVE-2026-100192 | X-SpringBoot up to 6.0 select appKey/appSecret improper authentication

September 25, 2026 Yanac

A vulnerability marked as critical has been reported in X-SpringBoot up to 6.0. Affected by this vulnerability is an unknown functionality of the file /application/manager/select. Performing a manipulation of the argument appKey/appSecret results in improper authentication.

This vulnerability is identified as CVE-2026-100192. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More