CVE-2026-4232General

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthorityByUserId. Executing a manipulation of the argument userId can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-03-16); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-16: 1Mentions · 2026-04-13: 1Technical Details · 2026-04-13: 103-1604-13
Signal classification1 categories
General
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • David@DavidMarquet19
    General

    📌 Top CVEs recientes (CVSS>=7.0): 1. 💉 CVE-2026-4235 (CVSS: 7.3) 2. 💉 CVE-2026-4232 (CVSS: 7.3) 3. 🕷️ CVE-2026-4231 (CVSS: 7.3) 4. 💉 CVE-2026-4229 (CVSS: 7.3) 5. 🧱 CVE-2026-4227 (CVSS: 8.8) #CyberSecurity #CVE #Infosec

    Post summary

    The post provides a brief list of recent high‑CVSS CVEs without any additional exploitation or mitigation details.

    0000051
    165 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-4232 A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthority… https://www.cve.org/CVERecord?id=CVE-2026-4232

    Post summary

    The statement notes a CVE for Tiandy Integrated Management Platform 7.17.0 with minimal detail, primarily indicating the existence of a vulnerability without further technical or operational context.

    00000150
    56.7K followersView on X

Explore more