CVE-2026-92466: falha de alta gravidade em zlt2000 microservices-platform
microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
41Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 8.7epss 0.9%
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including user management, role assignment, and Elasticsearch index operations by bypassing the disabled authorization enforcement.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
zlt2000 · microservices-platformPoCs públicas encontradas — 5
cve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C06_set_role_to_user.pynão verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C10_reset_password_by_id.pynão verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C04_save_or_update_user.pynão verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C21_delete_es_index.pynão verificadocve_referencegithub.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C11_list_all_users.pynão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — zlt2000 microservices-platform
No mesmo produto, das mais perigosas para as menos.
CVE-2026-92469HIGHmicroservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership CheckEPSS 0.5%CVE-2026-92468HIGHmicroservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-centerEPSS 0.5%CVE-2026-92467HIGHmicroservices-platform through 6.0.0 Unverified Password Change via /users/passwordEPSS 0.5%CVE-2025-8738MEDIUMzlt2000 microservices-platform Spring Actuator Interface actuator information disclosureEPSS 0.4%CVE-2025-8841MEDIUMzlt2000 microservices-platform FileController.java upload unrestricted uploadEPSS 0.3%CVE-2025-8737MEDIUMzlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirectEPSS 0.3%
Referências
https://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C04_save_or_update_user.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C06_set_role_to_user.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C10_reset_password_by_id.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C11_list_all_users.pyhttps://github.com/LinYuanyi1/cve-request-poc/blob/master/microservice-platform/C21_delete_es_index.pyhttps://github.com/zlt2000/microservices-platformhttps://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-commons/zlt-auth-client-spring-boot-starter/src/main/java/com/central/oauth2/common/properties/UrlPermissionProperties.java#L25https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-commons/zlt-auth-client-spring-boot-starter/src/main/java/com/central/oauth2/common/service/impl/DefaultPermissionServiceImpl.java#L59https://github.com/zlt2000/microservices-platform/blob/v6.0.0/zlt-gateway/sc-gateway/src/main/resources/application.yml#L122https://www.vulncheck.com/advisories/microservices-platform-through-6.0.0-missing-authorization-via-disabled-url-permission-checking