CVE-2026-111355 | zhontai Admin.Core up to 10.1.0 ById Endpoint UserService.byId/OrgService.byId id authorization

October 15, 2026 Yanac

A vulnerability was found in zhontai Admin.Core up to 10.1.0. It has been rated as critical. The affected element is the function UserService.byId/OrgService.byId of the component ById Endpoint. Performing a manipulation of the argument ID results in authorization bypass.

This vulnerability is reported as CVE-2026-111355. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More