Dashboard / CVE-2026-124621

CVE-2026-124621

LOW
INFO Priority: 0.01 BB Relevance: 54/100
Published: 2026-11-09 Modified: 2026-11-09 First seen: 2026-11-09 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability was determined in kongxin-github Java_Library_Management_System up to 70a6eb6b96fe64575d8051f1a59055bfc5dc5885. This affects the function UpdateAdmin.deleteuser/UpdateAdmin.updateadmin/UpdateAdmin.updatepass/Book.addbook/Book.modifybook/Book.deletebook/Category.addcategory/Category.setcategory/Landing.sureadmin of the file src/view/MainInterface.java of the component Swing UI Layer. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
kongxin-github Java_Library_Management_System 70a6eb6b96fe64575d8051f1a59055bfc5dc5885
kongxin-github Java_Library_Management_System 70a6eb6b96fe64575d8051f1a59055bfc5dc5885

References & Advisories (6)

Bug Bounty Relevance

54 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.27%
Raw Score 0.002680
Percentile 19.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00268
2026-11-12
0.00268
2026-11-10
0.00268

Intelligence Sources

mitre ref →
nvd ref →

External Links