Threats Tagged 'cve-2026-16450'
View all threats tagged with 'cve-2026-16450'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-16450'
Click on any threat for detailed analysis and mitigation recommendations
0 A vulnerability in zsadmin2025 ZS-Admin up to commit b52e14536d59fda11e56e2536a1c32e82a38cead allows remote attackers to bypass authorization by manipulating the X-Tenant-Id argument in the getTenantId function of the MyBatis-Plus Tenant Plugin. The product uses a rolling release system, so specific affected versions are not disclosed. The vulnerability is publicly known and exploit code is available, but no vendor response or patch has been issued yet. Join the discussion | GCVE Database | 07/21/2026, 18:31:00 UTC Added: 07/21/2026, 19:57:54 UTC |
0 CVE-2026-16450 is an authorization bypass vulnerability in the zsadmin2025 ZS-Admin product affecting the getTenantId function in the /api/system/sys/dept/page endpoint. The issue arises from manipulation of the X-Tenant-Id argument in the MyBatis-Plus Tenant Plugin component. The vulnerability can be exploited remotely without user interaction and requires low privileges. The product uses a rolling release system, and no specific affected or fixed versions are disclosed. No official patch or remediation guidance has been provided yet. Join the discussion | CVE Database V5 | 07/21/2026, 15:30:08 UTC Added: 07/21/2026, 15:57:36 UTC |
Showing 1 to 2 of 2 results