Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.0
CVE-2026-97721: Sanluan PublicCMS permits unauthorized data export
CVE-2026-97721 · published 24 days ago
Summary
The PublicCMS version up to 6.202506.e allows users to change a user or department ID when exporting data, which lets them bypass normal access controls. This means an attacker could retrieve information they should not see. Apply the vendor's update or restrict access to the export functions until a fix is installed.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sanluan | publiccms | 6.202506.a |
Original advisory text
Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization
A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData. This manipulation of the argument userId/deptId causes authorization bypass. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
2.0
Low
Type
CWE-639Authorization Bypass Through User-Controlled Key
CWE-285Improper Authorization
Timeline
Published25 Sep 2026
Updated19 Oct 2026
First seen25 Sep 2026
Track software like this
Free during beta