CVE-2026-93961 | Dromara UJCMS up to 12.3.1 UserController UserController.java usernameExist Username improper authorization (Issue 22)

A vulnerability, which was classified as problematic, has been found in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api/UserController.java of the component UserController. Performing a manipulation of the argument Username results in improper authorization.

This vulnerability is cataloged as CVE-2026-93961. It is possible to initiate the attack remotely. There is no exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More