CVE-2026-102293 | realjerrytang tacomall 1.0.0 api-admin Backend ApiMaApplication.java OrgStaffServiceImpl.add isAdmin/jobId improper authorization

September 28, 2026 Yanac

A vulnerability was found in realjerrytang tacomall 1.0.0. It has been classified as critical. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization.

This vulnerability is referenced as CVE-2026-102293. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More