Java Library Management System: Improper authorization vulnerability (CVE-2026-124621)
An improper authorization vulnerability in the Swing UI layer of Java Library Management System has been identified, allowing for potential remote exploitation.
CVE search metadata
CVE search record: CVE-2026-124621. Severity: high. CVSS: 7.4. KEV: no. Product: Java_Library_Management_System (<= 70a6eb6b96fe64575d8051f1a59055bfc5dc5885). Brief: Java Library Management System: Improper authorization vulnerability (CVE-2026-124621). Brief link: https://feed.craftedsignal.io/briefs/2026-11-java-library-mgmt-auth/
Triage facts
Revision 1- Applicability
- Java_Library_Management_System (<= 70a6eb6b96fe64575d8051f1a59055bfc5dc5885)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 9, 11:38 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability exists in kongxin-github Java_Library_Management_System (up to commit 70a6eb6b96fe64575d8051f1a59055bfc5dc5885). The vulnerability stems from improper authorization in the Swing UI Layer within src/view/MainInterface.java, specifically affecting the functions UpdateAdmin.deleteuser, UpdateAdmin.updateadmin, UpdateAdmin.updatepass, Book.addbook, Book.modifybook, Book.deletebook, Category.addcategory, Category.setcategory, and Landing.sureadmin. The vulnerability is capable of being exploited remotely. The exploit has been publicly disclosed. The project maintainers have been informed but have not provided a response.