Unrated severityNVD Advisory· Published Sep 8, 2026

CVE-2026-79571

Description

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fangtang7/Springboot Projectinferred
Range: =1.0.0

Patches

Vulnerability mechanics

References

github.com/fangtang7/CVE/blob/main/springboot-project%20Seller-Side/Authentication%20Bypass.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000