CVE-2026-2669— Rongzhitong Visual Integrated Command and Dispatch Platform User delete access control
Quick assessment
Affected
Rongzhitong Visual Integrated Command and Dispatch Platform
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Rongzhitong Visual Integrated Command and Dispatch Platform是中国融智通（Rongzhitong）公司的一个面向应急管理、公共安全的集成指挥系统。 Rongzhitong Visual Integrated Command and Dispatch Platform 20260206及之前版本存在访问控制错误漏洞，该漏洞源于对文件/dm/dispatch/user/delete中参数ID的错误操作，导致访问控制不当。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-2669
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Rongzhitong Visual Integrated Command and Dispatch Platform User delete access control
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This impacts an unknown function of the file /dm/dispatch/user/delete of the component User Handler. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
访问控制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Rongzhitong Visual Integrated Command and Dispatch Platform 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Rongzhitong Visual Integrated Command and Dispatch Platform是中国融智通（Rongzhitong）公司的一个面向应急管理、公共安全的集成指挥系统。 Rongzhitong Visual Integrated Command and Dispatch Platform 20260206及之前版本存在访问控制错误漏洞，该漏洞源于对文件/dm/dispatch/user/delete中参数ID的错误操作，导致访问控制不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rongzhitong | Visual Integrated Command and Dispatch Platform | 20260206 | - |
|
II. Public POCs for CVE-2026-2669
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-2669
请登录查看更多情报信息。
Same Patch Batch · Rongzhitong · 2026-02-18 · 3 CVEs total
| CVE-2026-2668 | 7.3 HIGH | Rongzhitong Visual Integrated Command and Dispatch Platform User add access control |
| CVE-2026-2667 | 5.3 MEDIUM | Rongzhitong Visual Integrated Command and Dispatch Platform api access control |
IV. Related Vulnerabilities
Same product: Visual Integrated Command and Dispatch Platform
Same vendor: Rongzhitong
Same weakness: CWE-284
-
CVE-2026-76281
Improper Access Control in Splunk Enterprise -
CVE-2026-76265
Improper Access Control through REST API Endpoints in Splunk -
CVE-2026-76463
Cisco Meraki Security Hardening Release: October 2026 - Impr -
CVE-2026-76498
Cisco Application Policy Infrastructure Controller Hardening -
CVE-2026-76455
Cisco NX-OS Software Security Hardening Release: October 202
V. Comments for CVE-2026-2669
No comments yet