Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this vulnerability is an unknown functionality of the file /api/admin/sys-user/reset/password/ of the component Password Reset Handler. This manipulation of the argument userId causes use of default password. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.3.3-beta addresses this issue. Patch name: aefaabfd7527188bfba3c8c9eee17c316d094802. It is suggested to upgrade the affected component. The project was informed beforehand and acted very professional: "We have added authorization validation to the password reset interface; now only users with the corresponding permissions are allowed to perform password resets."
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
14 versions affected across 1 product
CVE-2026-3186 A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this vulnerability is an unknown functionality of the file /api/admin/sys-us… https://www.cve.org/CVERecord?id=CVE-2026-3186
Post summary
The text briefly references CVE-2026-3186, noting a vulnerability in feiyuchuixue sz-boot-parent up to 1.3.2-beta, but provides no further details.
15 of 15 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | szadmin | sz-boot-parent | - | - | - |
| App | szadmin | sz-boot-parent | 1.0.0 | - | - |
| App | szadmin | sz-boot-parent | 1.0.1 | - | - |
| App | szadmin | sz-boot-parent | 1.0.2 | - | - |
| App | szadmin | sz-boot-parent | 1.1.0 | - | - |
| App | szadmin | sz-boot-parent | 1.2.0 | - | - |
| App | szadmin | sz-boot-parent | 1.2.1 | - | - |
| App | szadmin | sz-boot-parent | 1.2.2 | - | - |
| App | szadmin | sz-boot-parent | 1.2.3 | - | - |
| App | szadmin | sz-boot-parent | 1.2.4 | - | - |
| App | szadmin | sz-boot-parent | 1.2.5 | - | - |
| App | szadmin | sz-boot-parent | 1.2.6 | - | - |
| App | szadmin | sz-boot-parent | 1.3.0 | - | - |
| App | szadmin | sz-boot-parent | 1.3.1 | - | - |
| App | szadmin | sz-boot-parent | 1.3.2 | - | - |