CVE-2026-2078

A vulnerability was detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addPermission/updatePermission/deletePermission of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\PermissionController.java of the component Permission Management. Performing a manipulation results in improper authorization. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-266
• CWE-285

• https://github.com/yeqifu/warehouse/Product
• https://github.com/yeqifu/warehouse/issues/55Exploit, Issue Tracking, Vendor Advisory
• https://github.com/yeqifu/warehouse/issues/55#issue-3846656775Exploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.344644Permissions Required, VDB Entry
• https://vuldb.com/?id.344644Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.745513Third Party Advisory, VDB Entry

Published

Feb 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20772Uncontrolled search path for some Intel(R) Connectivity Perf…6.7
• CVE-2026-20775Uncaught exception for some Intel(R) TDX modules within Ring…6.8
• CVE-2026-20776Improper conditions check for some Intel(R) PROSet/Wireless …8.3
• CVE-2026-20777A heap-based buffer overflow vulnerability exists in the Nic…8.1
• CVE-2026-20778Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi So…7
• CVE-2026-20779Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-u…7.1
• CVE-2026-20780Uncontrolled resource consumption for some Intel(R) PROSet/W…6.9
• CVE-2026-20781WebSocket endpoints lack proper authentication mechanisms, e…9.8
• CVE-2026-20782Buffer overflow for some Intel(R) QAT software drivers for W…6.6
• CVE-2026-20783Improper conditions check in the firmware for the Intel(R) N…6.9
• CVE-2026-20786Out-of-bounds read for the Intel(R) NPU Driver for all versi…6.9
• CVE-2026-20787Null pointer dereference for some Intel(R) PROSet/Wireless W…7.1