CVE-2026-90939— novel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint
Quick assessment
Affected
201206030 novel-plus
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
从 5.3.3 及以下的 novel-plus 版本存在一个信息泄露漏洞，位于 端点。该端点缺少适当的权限注解，导致经过身份验证的攻击者能够获取其数据权限范围内用户的密码哈希值以及包括邮箱地址和电话号码在内的个人数据，从而可能进行离线哈希破解并实现账户接管。
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-90939
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
novel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
novel-plus through 5.3.3 contains an information disclosure vulnerability in the /sys/user/list endpoint that lacks proper permission annotations. Authenticated attackers can retrieve password hashes and personal data including email addresses and phone numbers for users within their data scope, enabling offline hash cracking and account takeover.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| 201206030 | novel-plus | 0 ~ 5.3.3 | - |
|
II. Public POCs for CVE-2026-90939
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-90939
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-90939 (1)
Vendor Advisories for CVE-2026-90939 (1)
Proof of Concept for CVE-2026-90939 (1)
Vendor Pages for CVE-2026-90939 (1)
Other References for CVE-2026-90939 (2)
Same Patch Batch · 201206030 · 2026-09-14 · 3 CVEs total
| CVE-2026-90940 | 5.3 MEDIUM | novel-plus through 5.3.3 Default Cache Management Password in the Front Portal |
| CVE-2026-90941 | 4.3 MEDIUM | novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint |
IV. Related Vulnerabilities
Same product: novel-plus
-
CVE-2026-90940
novel-plus through 5.3.3 Default Cache Management Password i -
CVE-2026-90941
novel-plus through 5.3.3 Missing Authorization on the Admin -
CVE-2025-6535
xxyopen/201206030 novel-plus User Management Module UserMapp -
CVE-2025-6534
xxyopen/201206030 novel-plus File FileController.java remove -
CVE-2025-6533
xxyopen/201206030 novel-plus CATCHA LoginController.java aja
Same vendor: 201206030
-
CVE-2026-90940
novel-plus through 5.3.3 Default Cache Management Password i -
CVE-2026-90941
novel-plus through 5.3.3 Missing Authorization on the Admin -
CVE-2025-4036
201206030 Novel Chapter AuthorController.java updateBookChap -
CVE-2025-3956
201206030 novel-cloud BookInfoMapper.xml RestResp sql inject
Same weakness: CWE-862
-
CVE-2026-82437
Apache Storm Logviewer: Log Access Controls Not Enforced by -
CVE-2026-90941
novel-plus through 5.3.3 Missing Authorization on the Admin -
CVE-2026-75030
Apache Syncope: Incomplete authorization checks for Group me -
CVE-2026-90933
laradashboard through 1.2.2 Missing Authorization via Licens -
CVE-2026-8821
Playbooks run owner channel membership permission bypass
V. Comments for CVE-2026-90939
No comments yet