CVE-2026-92466: fallo de gravedad alta en zlt2000 microservices-platform
microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
41Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 8.7epss 0.9%
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including user management, role assignment, and Elasticsearch index operations by bypassing the disabled authorization enforcement.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
zlt2000 · microservices-platformPoCs públicas encontradas — 5
cve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C06_set_role_to_user.pyno verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C10_reset_password_by_id.pyno verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C04_save_or_update_user.pyno verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C21_delete_es_index.pyno verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C11_list_all_users.pyno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — zlt2000 microservices-platform
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-92469HIGHmicroservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership CheckEPSS 0.5%CVE-2026-92468HIGHmicroservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-centerEPSS 0.5%CVE-2026-92467HIGHmicroservices-platform through 6.0.0 Unverified Password Change via /users/passwordEPSS 0.5%CVE-2025-8738MEDIUMzlt2000 microservices-platform Spring Actuator Interface actuator information disclosureEPSS 0.4%CVE-2025-8841MEDIUMzlt2000 microservices-platform FileController.java upload unrestricted uploadEPSS 0.3%CVE-2025-8737MEDIUMzlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirectEPSS 0.3%
Referencias
https://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C04_save_or_update_user.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C06_set_role_to_user.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C10_reset_password_by_id.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C11_list_all_users.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C21_delete_es_index.pyhttps://github.com/zlt2000/microservices-platformhttps://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-commons/zlt-auth-client-spring-boot-starter/src/main/java/com/central/oauth2/common/properties/UrlPermissionProperties.java#L25https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-commons/zlt-auth-client-spring-boot-starter/src/main/java/com/central/oauth2/common/service/impl/DefaultPermissionServiceImpl.java#L59https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-gateway/sc-gateway/src/main/resources/application.yml#L122https://www.vulncheck.com/advisories/microservices-platform-through-6.0.0-missing-authorization-via-disabled-url-permission-checking