Medium severity6.3OSV Advisory· Published Sep 13, 2026· Updated Sep 15, 2026
CVE-2026-90595
CVE-2026-90595
Description
A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file aceModules/ace-admin/auth/controller/OnlineController.java. The manipulation results in missing authorization. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21.0, 2.2, 3.0, …+ 1 more
- (no CPE)range: 1.0, 2.2, 3.0, …
- (no CPE)range: 1.0/2.2/3.0
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.