CVE-2026-129465 | izhaorui Zr.Admin.NET SysProfileController SysProfileController.UpdateProfile UserId resource injection

November 15, 2026 Yanac

A vulnerability marked as critical has been reported in izhaorui Zr.Admin.NET. Affected is the function SysProfileController.UpdateProfile of the component SysProfileController. Performing a manipulation of the argument UserId results in improper control of resource identifiers.

This vulnerability is cataloged as CVE-2026-129465. It is possible to initiate the attack remotely. There is no exploit available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More