Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f929da84. Affected is an unknown function of the file /api/v1/users/ of the component Backend User Endpoint. Performing a manipulation results in missing authorization. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The patch is named 19fc3282a1bb78a05c34945c088525d20e081cbd. Applying a patch is the recommended action to fix this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-15752 Missing Authorization Vulnerability in Zhinianboke Xianyu-Auto-Reply Backend User Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-15752
Post summary
The text announces a new CVE (CVE-2026-15752) with a brief description of a missing authorization flaw in a backend endpoint. No PoC, exploit, patch, or active exploitation details are included.