CVE-2026-106705
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ELADMIN（eladmin-mp）2.7 及更早版本的角色管理模块中存在访问控制不当的漏洞。 接口（由 方法处理）仅通过比较目标角色的等级与调用者的最低等级来授权请求，既未对授予的菜单集合进行验证，也未阻止调用者修改自身角色。因此，任何已登录且其角色拥有委托权限 的非管理员用户，均可提交自身角色 ID 及任意菜单 ID 列表，从而越权修改角色权限。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1098 · Account Manipulation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-106705
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither validates the granted menu set nor prevents a caller from modifying its own role. A logged-in non-admin user whose role holds the delegated `roles:edit` permission can submit its own role id together with an arbitrary list of menu ids.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-106705
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-106705
请登录查看更多情报信息。
Proof of Concept for CVE-2026-106705 (1)
Vendor Pages for CVE-2026-106705 (1)
Same Patch Batch · n/a · 2026-10-16 · 12 CVEs total
| CVE-2026-111210 | 7.3 HIGH | bitcoinj Payment Request PaymentSession.java url.openConnection server-side request forger |
| CVE-2026-95183 | DeepSeek Harness c291e796 上下文压缩提示注入漏洞 | |
| CVE-2026-95182 | DeepSeek Harness 任意代码执行漏洞 | |
| CVE-2026-88755 | Z.ai ZCode 3.11.2.6792 远程代码执行漏洞 | |
| CVE-2025-52097 | InstantForum.NET 4.1.4 跨站脚本漏洞 | |
| CVE-2026-26846 | WEINVEIW EBPro 6.10.01.510 UtilityManagerEx.exe 缓冲区溢出 | |
| CVE-2026-46472 | GStreamer 1.28.2 前 MP4 解析越界读取漏洞 | |
| CVE-2026-46471 | GStreamer 1.28.2 之前版本 MP4 解析堆越界漏洞 | |
| CVE-2025-66969 | OpenModSim 1.11.0 整数溢出导致拒绝服务 | |
| CVE-2025-55653 | GPAC MP4Box v2.4 零除漏洞导致浮点异常 | |
| CVE-2025-55640 | GPAC MP4Box v2.4 stbl_AddSize 堆溢出导致拒绝服务 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-106705
No comments yet