CVE-2026-105610 | chillzhuang SpringBlade up to 5.0.1 Parameter Submit Management ParamController.java initPassword improper authorization (Issue 41)

October 5, 2026 Yanac

A vulnerability labeled as problematic has been found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument initPassword results in improper authorization.

This vulnerability is known as CVE-2026-105610. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More