CVE-2026-96881

Description

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Overview

State: PUBLISHED
Assigner (CNA): VulDB
CVSS severity: MEDIUM
CVSS score: 6.9 / 10
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Effective score: 6.9 / 10 MEDIUM source: CNA overview
CWE(s): CWE-285, CWE-266
Reserved: 2026-09-23
Published: 2026-09-24 02:15 UTC
Last updated: 2026-09-24 13:15 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96881.json

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

EPSS score: 0.0029 (probability of exploitation in next 30 days)
EPSS percentile: 18.77% vs all CVEs — higher = more likely to be exploited, as of 2026-09-24

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-85785
Assigner: VulDB
Published: Sep 24, 2026, 2:15:10 AM
Updated: Sep 24, 2026, 1:15:19 PM
EUVD base score (CVSS 4.0): 6.9 / 10
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EUVD-reported EPSS: 0.2900
Vendors: TaleLin
Products: lin-cms-spring-boot (0.2.1)

lin-cms-spring-boot (0.2.0)
Aliases: GHSA-rf2v-x72r-q5h8

ENISA description: A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

EUVD references (5)

Affected products (1)

Vendor	Product	Versions	Platforms
TaleLin	lin-cms-spring-boot	`0.2.0` (affected), `0.2.1` (affected)	—

Vendor references (5)

References embedded in the original CVE record by the assigning CNA.

VDB-409079 | TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization vdb-entrytechnical-description
VDB-409079 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
CVE-2026-96881 | CVE Analysis and Report third-party-advisory
Submit #906082 | https://github.com/logamee/lin-cms-spring-boot lin-cms 0.2.1 unauthorized access vulnerability third-party-advisory
https://github.com/hhhh333/CVE/blob/main/Lin-CMS-%E6%9C%AA%E6%8E%88%E6%9D%832.md exploit

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Remediations (10)

ServiceNow August 2026 Critical CVEs: What to Patch and Why

web:aicybr.com

Applicability is CVE - and release-specific. Compare each instance's exact family, patch and hot- fix level with ServiceNow's current advisory before a maintenance window. Hosted and self-hosted remediation ServiceNow-hosted instances ServiceNow says it deployed the security update to hosted instances.

2026-09-25 10:43 UTC
CVE-2026-68820 Is in KEV. What BOD 26-04 Requires Now | Qualys

web:blog.qualys.com

Executive Summary CVE - 2026 -68820 is an actively exploited Windows vulnerability listed in CISA's Known Exploited Vulnerabilities (KEV) Catalog, with a remediation deadline as suggested by CISA BOD 26-04. CISA BOD 26-04 introduces risk-based remediation timelines ranging from 3 to 14 days, increasing the pressure on teams to move quickly from patch availability to verified remediation ...

2026-09-25 10:43 UTC
September 2026 Patch Breaks RDS: Fix Without Rolling Back

web:byteiota.com

That's not all. September's Patch Tuesday also fixed two zero-days under active exploitation: CVE - 2026 -85880, a heap buffer overflow in Windows ALPC that allows local privilege escalation to SYSTEM, and CVE - 2026 -81963, a link-following flaw in the Windows Update Stack. Rolling back removes those fixes too.

2026-09-25 10:43 UTC
CVE-2026-86881 · Apple · CVSS 9.1 · CVE Brief Analyst Report

web:cvebrief.com

Apple · iOS, iPadOS, macOS, tvOS, visionOS, watchOS A certificate validation flaw in multiple Apple operating systems allows an attacker with a compromised intermediate certificate authority to issue certificates with arbitrary extended key usages. Quick facts CVSS score 9.1 (Critical) Fix available Yes: 26.7 ( CVE record) Affected versions iOS/iPadOS < 26.7 or 27; macOS < 15.8, 26.7, or 27 ...

2026-09-25 10:43 UTC
Always On VPN Security Updates September 2026

web:directaccess.richardhicks.com

Microsoft released the September 2026 security updates today, which include numerous fixes affecting Always On VPN deployments. This month's edition addresses vulnerabilities in Windows Server Routing and Remote Access (RRAS), VPN protocols such as Secure Socket Tunneling Protocol (SSTP) and Internet Key Exchange version 2 (IKEv2). The updates also include Active Directory Certificate ...

2026-09-25 10:43 UTC
Microsoft Patch Tracker (September 2026): Exploit-Ranked | Senserva

web:senserva.com

Every Microsoft security patch (KB) and the CVEs it fixes, with severity, CVSS, and CISA KEV status. Cross-linked to the CVE reference.

2026-09-25 10:43 UTC
Landing Page | ServiceNow Common Vulnerabilities & Exposures (CVE ...

web:support.servicenow.com

Overview The advisories below document publicly disclosed Common Vulnerabilities and Exposures ( CVEs ) in the Now Platform by ServiceNow. Because ServiceNow uses various methods to communicate vulnerability information, patches, and other fixes, customers should review family, security patch , and hotfix release notes, which are available at https://docs.servicenow.com, for a complete list of ...

2026-09-25 10:43 UTC
[Security Advisory] September 2026 CVE Advisory Notification

web:support.servicenow.com

What you need to know: On September 24, 2026 , ServiceNow issued CVE - 2026 -86857, CVE - 2026 -86858, CVE - 2026 -13016, CVE - 2026 -86859, and CVE - 2026 -86860. Each of these security issues was identified through

2026-09-25 10:43 UTC
September 2026 Patch Tuesday: CISO Executive Summary

web:www.action1.com

This CISO-focused summary highlights the vulnerabilities and critical infrastructure risks that should take priority for remediation following Microsoft's September 2026 Patch Tuesday release.

2026-09-25 10:43 UTC
Security Advisory 0181 - Arista

web:www.arista.com

September 9, 2026 Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command.

2026-09-25 10:43 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-96881.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-96881",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-24T13:04:31.016000Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-24T13:15:19.061Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:talelin:lin-cms-spring-boot:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "book Endpoint"
          ],
          "product": "lin-cms-spring-boot",
          "vendor": "TaleLin",
          "versions": [
            {
              "status": "affected",
              "version": "0.2.0"
            },
            {
              "status": "affected",
              "version": "0.2.1"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "hhhha (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T02:15:10.202Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-409079 | TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/409079"
        },
        {
          "name": "VDB-409079 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/409079/cti"
        },
        {
          "name": "CVE-2026-96881 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-96881"
        },
        {
          "name": "Submit #906082 | https://github.com/logamee/lin-cms-spring-boot lin-cms 0.2.1 unauthorized access vulnerability",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/906082"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/hhhh333/CVE/blob/main/Lin-CMS-%E6%9C%AA%E6%8E%88%E6%9D%832.md"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-23T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-23T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-23T20:20:20.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-96881",
    "datePublished": "2026-09-24T02:15:10.202Z",
    "dateReserved": "2026-09-23T18:15:07.970Z",
    "dateUpdated": "2026-09-24T13:15:19.061Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}