CVE-2026-124621

A vulnerability was determined in kongxin-github Java_Library_Management_System up to 70a6eb6b96fe64575d8051f1a59055bfc5dc5885. This affects the function UpdateAdmin.deleteuser/UpdateAdmin.updateadmin/UpdateAdmin.updatepass/Book.addbook/Book.modifybook/Book.deletebook/Category.addcategory/Category.setcategory/Landing.sureadmin of the file src/view/MainInterface.java of the component Swing UI Layer. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-266
• CWE-285

• https://github.com/kongxin-github/Java_Library_Management_System/
• https://github.com/kongxin-github/Java_Library_Management_System/issues/4
• https://vuldb.com/cve/CVE-2026-124621
• https://vuldb.com/submit/1040541
• https://vuldb.com/vuln/433046
• https://vuldb.com/vuln/433046/cti

Published

Nov 9, 2026

Last Modified

Nov 9, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-124603An API key is hardcoded and retrievable from the GV-Cloud ap…6.2
• CVE-2026-124604The RSA cryptographic key material, including a private key …6.2
• CVE-2026-12461Out of bounds read in WebRTC in Google Chrome on Windows pri…6.5
• CVE-2026-124610Rejected reason: 依 VUL-2026-008441 判定為主
• CVE-2026-124617Rejected reason: 歸類為 JSONCPP Open Source 之問題
• CVE-2026-12462Use after free in Media in Google Chrome prior to 149.0.7827…7.5
• CVE-2026-124622A vulnerability was identified in olivier-ls PHP-FTS up to 1…5.3
• CVE-2026-124623A security flaw has been discovered in PipraPay 3.0.0. Affec…4.7
• CVE-2026-124624A weakness has been identified in PipraPay 3.0.0. Affected b…5.3
• CVE-2026-124625A security vulnerability has been detected in PipraPay 3.0.0…6.3
• CVE-2026-124627In affected versions of Octopus Server, incorrect validation…8.7
• CVE-2026-124628In affected versions of Octopus Server, incorrect validation…8.7