CVE-2026-105611 | chillzhuang SpringBlade up to 5.0.1 User Detail Endpoint RoleController.java id improper authorization (Issue 42)

October 5, 2026 Yanac

A vulnerability marked as problematic has been reported in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint. This manipulation of the argument ID causes improper authorization.

This vulnerability is handled as CVE-2026-105611. The attack can be initiated remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More