{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/kongxin-github/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:kongxin_github:java_library_management_system:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.4,"id":"CVE-2026-124621"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Java_Library_Management_System (\u003c= 70a6eb6b96fe64575d8051f1a59055bfc5dc5885)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["kongxin-github"],"content_html":"\u003cp\u003eA vulnerability exists in kongxin-github Java_Library_Management_System (up to commit 70a6eb6b96fe64575d8051f1a59055bfc5dc5885). The vulnerability stems from improper authorization in the Swing UI Layer within src/view/MainInterface.java, specifically affecting the functions UpdateAdmin.deleteuser, UpdateAdmin.updateadmin, UpdateAdmin.updatepass, Book.addbook, Book.modifybook, Book.deletebook, Category.addcategory, Category.setcategory, and Landing.sureadmin. The vulnerability is capable of being exploited remotely. The exploit has been publicly disclosed. The project maintainers have been informed but have not provided a response.\u003c/p\u003e\n","date_modified":"2026-11-09T11:38:49Z","date_published":"2026-11-09T11:38:49Z","id":"https://feed.craftedsignal.io/briefs/2026-11-java-library-mgmt-auth/","summary":"An improper authorization vulnerability in the Swing UI layer of Java Library Management System has been identified, allowing for potential remote exploitation.","title":"Java Library Management System: Improper authorization vulnerability (CVE-2026-124621)","url":"https://feed.craftedsignal.io/briefs/2026-11-java-library-mgmt-auth/"}],"language":"en","title":"CraftedSignal Threat Feed - Kongxin-Github","version":"https://jsonfeed.org/version/1.1"}