CVE-2026-102293 in tacomall

Riassunto

di MITRE • 29/09/2026

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: VulDB
• Divulgazione: 29/09/2026
• Moderazione: accettato
• Voce: VDB-411186
• CPE: pronto
• CWE: CWE-285 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-102293
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-102293
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-102293/