CVE-2026-3185

A vulnerability was found in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected is an unknown function of the file /api/admin/sys-message/ of the component API Endpoint. The manipulation of the argument messageId results in authorization bypass. The attack can be launched remotely. The exploit has been made public and could be used. Upgrading to version 1.3.3-beta is able to address this issue. The patch is identified as aefaabfd7527188bfba3c8c9eee17c316d094802. The affected component should be upgraded. The project was informed beforehand and acted very professional: "We have implemented message ownership verification, so that users can only query messages related to themselves."

• CWE-285
• CWE-639
• CWE-639

• https://github.com/feiyuchuixue/sz-boot-parent/Product
• https://github.com/feiyuchuixue/sz-boot-parent/commit/aefaabfd7527188bfba3c8c9eee17c316d094802Patch
• https://github.com/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-betaRelease Notes
• https://github.com/yuccun/CVE/blob/main/sz-boot-parent-IDOR_Message_ID_Enumeration.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.347743Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.347743Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.754036Third Party Advisory, VDB Entry

Published

Feb 25, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31844An authenticated SQL Injection vulnerability (CWE-89) exists…8.8
• CVE-2026-31845A reflected cross-site scripting (XSS) vulnerability exists …9.3
• CVE-2026-31846Missing authentication in the /goform/ate endpoint in Nexxt …7.1
• CVE-2026-31847Hidden functionality in the /goform/setSysTools endpoint in …8.8
• CVE-2026-31848Nexxt Solutions Nebula 300+ firmware through version 12.01.0…9.8
• CVE-2026-31849Nexxt Solutions Nebula 300+ firmware through version 12.01.0…6.5
• CVE-2026-31850Nexxt Solutions Nebula 300+ firmware through version 12.01.0…4.9
• CVE-2026-31851Nexxt Solutions Nebula 300+ firmware through version 12.01.0…9.8
• CVE-2026-31852Jellyfin is an open-source media system. The code-quality.ym…9.8
• CVE-2026-31853ImageMagick is free and open-source software used for editin…5.5
• CVE-2026-31854Cursor is a code editor built for programming with AI. Prior…8.8
• CVE-2026-31856Parse Server is an open source backend that can be deployed …9.8