CVE-2026-5529

MediumCVSS 4.3/10Last modified Jul 24, 2026

Description

A vulnerability was detected in Dromara lamp-cloud up to 5.8.1. This vulnerability affects the function pageUser of the file /defUser/pageUser of the component DefUserController. Performing a manipulation results in improper authorization. The attack can be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-266 CWE-285

Affected software

No affected versions have been published.

Timeline

Published: Apr 5, 2026
Last modified: Jul 24, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-552903.3In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local informati CVE-2026-552947.8In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loca CVE-2026-55306.3A flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file server/download.go of the component Mod CVE-2026-553018.4In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation o CVE-2026-553026.7In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privil CVE-2026-553046.7In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local CVE-2026-553067.5In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with CVE-2026-553074.4In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to l CVE-2026-55315.3A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_cr CVE-2026-553176.7In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of priv CVE-2026-553188.8In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no addition CVE-2026-55326.3A vulnerability was found in ScrapeGraphAI scrapegraph-ai up to 1.74.0. The affected element is the function create_sandbox_and_execute of t