{"id":"CVE-2026-79571","title":"Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cance…","summary":"Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cance…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-284"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T19:17:48.320","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79571","references":[{"url":"https://github.com/fangtang7/CVE/blob/main/springboot-project%20Seller-Side/Authentication%20Bypass.md","label":"cve@mitre.org"},{"url":"https://github.com/fangtang7/CVE/blob/main/springboot-project%20Seller-Side/Authentication%20Bypass.md","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-09T18:49:50.660399Z"},"epss":0.00291,"epssPercentile":0.21889,"ingestedAt":"2026-09-08T15:33:26.985Z","slug":"CVE-2026-79571","body":"## Overview\n\nIncorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":62,"depthScoreParts":{"impact":50.1,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201976,"id":"CVE-2026-79571","ts":1789399993456,"field":"exploit_available","old":"false","new":"true"},{"seq":201975,"id":"CVE-2026-79571","ts":1789399993456,"field":"cvss","old":null,"new":"9.1"},{"seq":201974,"id":"CVE-2026-79571","ts":1789399993456,"field":"severity","old":"none","new":"critical"},{"seq":200703,"id":"CVE-2026-79571","ts":1789397585523,"field":"exploit_available","old":"true","new":"false"},{"seq":200702,"id":"CVE-2026-79571","ts":1789397585523,"field":"cvss","old":"9.1","new":null},{"seq":200701,"id":"CVE-2026-79571","ts":1789397585523,"field":"severity","old":"critical","new":"none"},{"seq":199403,"id":"CVE-2026-79571","ts":1789395477117,"field":"exploit_available","old":"false","new":"true"},{"seq":199402,"id":"CVE-2026-79571","ts":1789395477117,"field":"cvss","old":null,"new":"9.1"},{"seq":199401,"id":"CVE-2026-79571","ts":1789395477117,"field":"severity","old":"none","new":"critical"},{"seq":198648,"id":"CVE-2026-79571","ts":1789392188221,"field":"exploit_available","old":"true","new":"false"},{"seq":198647,"id":"CVE-2026-79571","ts":1789392188221,"field":"cvss","old":"9.1","new":null},{"seq":198646,"id":"CVE-2026-79571","ts":1789392188221,"field":"severity","old":"critical","new":"none"},{"seq":196979,"id":"CVE-2026-79571","ts":1789384273284,"field":"exploit_available","old":"false","new":"true"},{"seq":196978,"id":"CVE-2026-79571","ts":1789384273284,"field":"cvss","old":null,"new":"9.1"},{"seq":196977,"id":"CVE-2026-79571","ts":1789384273284,"field":"severity","old":"none","new":"critical"},{"seq":194110,"id":"CVE-2026-79571","ts":1789378694054,"field":"exploit_available","old":"true","new":"false"},{"seq":194109,"id":"CVE-2026-79571","ts":1789378694054,"field":"cvss","old":"9.1","new":null},{"seq":194108,"id":"CVE-2026-79571","ts":1789378694054,"field":"severity","old":"critical","new":"none"},{"seq":192897,"id":"CVE-2026-79571","ts":1789376494538,"field":"exploit_available","old":"false","new":"true"},{"seq":192896,"id":"CVE-2026-79571","ts":1789376494538,"field":"cvss","old":null,"new":"9.1"},{"seq":192895,"id":"CVE-2026-79571","ts":1789376494538,"field":"severity","old":"none","new":"critical"},{"seq":191684,"id":"CVE-2026-79571","ts":1789373590413,"field":"exploit_available","old":"true","new":"false"},{"seq":191683,"id":"CVE-2026-79571","ts":1789373590413,"field":"cvss","old":"9.1","new":null},{"seq":191682,"id":"CVE-2026-79571","ts":1789373590413,"field":"severity","old":"critical","new":"none"},{"seq":190469,"id":"CVE-2026-79571","ts":1789369449667,"field":"exploit_available","old":"false","new":"true"},{"seq":190468,"id":"CVE-2026-79571","ts":1789369449667,"field":"cvss","old":null,"new":"9.1"},{"seq":190467,"id":"CVE-2026-79571","ts":1789369449667,"field":"severity","old":"none","new":"critical"},{"seq":189256,"id":"CVE-2026-79571","ts":1789368373474,"field":"exploit_available","old":"true","new":"false"},{"seq":189255,"id":"CVE-2026-79571","ts":1789368373474,"field":"cvss","old":"9.1","new":null},{"seq":189254,"id":"CVE-2026-79571","ts":1789368373474,"field":"severity","old":"critical","new":"none"},{"seq":188039,"id":"CVE-2026-79571","ts":1789365211607,"field":"exploit_available","old":"false","new":"true"},{"seq":188038,"id":"CVE-2026-79571","ts":1789365211607,"field":"cvss","old":null,"new":"9.1"},{"seq":188037,"id":"CVE-2026-79571","ts":1789365211607,"field":"severity","old":"none","new":"critical"},{"seq":186826,"id":"CVE-2026-79571","ts":1789363454977,"field":"exploit_available","old":"true","new":"false"},{"seq":186825,"id":"CVE-2026-79571","ts":1789363454977,"field":"cvss","old":"9.1","new":null},{"seq":186824,"id":"CVE-2026-79571","ts":1789363454977,"field":"severity","old":"critical","new":"none"},{"seq":185612,"id":"CVE-2026-79571","ts":1789361195335,"field":"exploit_available","old":"false","new":"true"},{"seq":185611,"id":"CVE-2026-79571","ts":1789361195335,"field":"cvss","old":null,"new":"9.1"},{"seq":185610,"id":"CVE-2026-79571","ts":1789361195335,"field":"severity","old":"none","new":"critical"},{"seq":184399,"id":"CVE-2026-79571","ts":1789358318967,"field":"exploit_available","old":"true","new":"false"},{"seq":184398,"id":"CVE-2026-79571","ts":1789358318967,"field":"cvss","old":"9.1","new":null},{"seq":184397,"id":"CVE-2026-79571","ts":1789358318967,"field":"severity","old":"critical","new":"none"},{"seq":182650,"id":"CVE-2026-79571","ts":1789354302674,"field":"exploit_available","old":"false","new":"true"},{"seq":182649,"id":"CVE-2026-79571","ts":1789354302674,"field":"cvss","old":null,"new":"9.1"},{"seq":182648,"id":"CVE-2026-79571","ts":1789354302674,"field":"severity","old":"none","new":"critical"},{"seq":181443,"id":"CVE-2026-79571","ts":1789353280100,"field":"exploit_available","old":"true","new":"false"},{"seq":181442,"id":"CVE-2026-79571","ts":1789353280100,"field":"cvss","old":"9.1","new":null},{"seq":181441,"id":"CVE-2026-79571","ts":1789353280100,"field":"severity","old":"critical","new":"none"},{"seq":180236,"id":"CVE-2026-79571","ts":1789350265490,"field":"exploit_available","old":"false","new":"true"},{"seq":180235,"id":"CVE-2026-79571","ts":1789350265490,"field":"cvss","old":null,"new":"9.1"}]}