CVE-2026-11521

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction Endpoint. Such manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-266
• CWE-285

• https://github.com/Mohammed-eid35/bank-management-system-springboot/
• https://github.com/Mohammed-eid35/bank-management-system-springboot/issues/8
• https://vuldb.com/cve/CVE-2026-11521
• https://vuldb.com/submit/836452
• https://vuldb.com/vuln/369141
• https://vuldb.com/vuln/369141/cti

Published

Jun 8, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11516A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171…5.5
• CVE-2026-11517A vulnerability was determined in UTT HiPER 2610G up to 3.0.…8.8
• CVE-2026-11518A vulnerability was identified in SourceCodester Inventory S…4.3
• CVE-2026-11519A security flaw has been discovered in SourceCodester Invent…6.3
• CVE-2026-1152A security vulnerability has been detected in technical-laoh…9.8
• CVE-2026-11520A weakness has been identified in SourceCodester Inventory S…3.5
• CVE-2026-11522A vulnerability was detected in Tenda W20E 15.11.0.6. This v…8.8
• CVE-2026-11523A flaw has been found in Tenda W20E 15.11.0.6. This issue af…8.8
• CVE-2026-11524A vulnerability has been found in Tenda W20E 15.11.0.6. Impa…8.8
• CVE-2026-11525Impact: When undici parses a Set-Cookie header, it accepts a…3.7
• CVE-2026-11526GD versions before 2.86 for Perl allow OS command injection …9.8
• CVE-2026-11527Config::IniFiles versions before 3.001000 for Perl allow OS …8.6