Threat database

eladmin versions up to 2.7 have an authorization bypass vulnerability allowing department-scoped user managers with user:edit or user:del permissions to modify or delete user accounts outside their authorized department scope. This occurs because write handlers do not enforce department checks when processing PUT or DELETE requests to /api/users. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.1.

CVE-2026-108706 is a missing authorization vulnerability in elunez eladmin's downloadS3Storage handler. It allows any authenticated user to access stored object URLs without proper storage permissions by enumerating sequential IDs. This exposure can lead to unauthorized access to file contents stored in publicly readable buckets. The vulnerability has a medium severity with a CVSS score of 5.3. A patch is available, and the product is a cloud service, so vendor-managed remediation is expected.

Eladmin versions up to 2.7 have a missing authorization vulnerability in the LocalStorageController uploadPicture handler. This flaw allows low-privileged authenticated users to bypass the storage:add permission. Exploitation involves sending POST requests with image-named files to the /api/localStorage/pictures endpoint, enabling unauthorized file writes to the server's local storage and disclosure of absolute server paths. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity.

CVE-2026-77036 is a medium severity vulnerability in elunez eladmin up to version 2.7. It involves improper authorization in several controller functions (EmailController, AliPayController, GeneratorController, GenConfigController). The vulnerability allows remote attackers to exploit authorization weaknesses. The issue was reported early to the project, but no response or fix has been provided yet. Exploit code has been publicly disclosed, but no known active exploitation in the wild has been confirmed.

CVE-2026-10550 is a command injection vulnerability in elunez eladmin affecting versions 2.0 through 2.7. The issue arises from unsafe manipulation of the uploadPath argument in the Application Deployment Module's App.java file. This flaw allows remote attackers to execute arbitrary commands. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3. No official patch or remediation has been announced by the vendor as of the publication date.

A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLogController. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is said to be difficult. The exploit has been published and may be used. It is required to know the RSA-encrypted password of the attacked user account.

A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited.

A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

A security flaw has been discovered in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file /auth/info. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils of the file eladmin-common/src/main/java/me/zhengjie/utils/EncryptUtils.java of the component DES Key Handler. The manipulation of the argument STR_PARAM with the input Passw0rd leads to inadequate encryption strength. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult.

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file eladmin-system\src\main\resources\config\application-prod.yml of the component Druid. The manipulation of the argument login-username/login-password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.