Guns 8.3.5 用户信息泄露漏洞 (CVE-2026-92600)

漏洞关键信息总结 漏洞概述 标题：Guns 8.3.5 及以下版本存在信息泄露漏洞（缺少权限校验） CVE：CVE-2026-92600 CWE：CWE-862 缺少授权校验 CVSS 评分：7.1（HIGH） CVSS 向量：CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/SC:N/SI:N/SA:N 日期：9/18/2026 影响版本：Guns ≤ 8.3.5 描述：Guns 8.3.5 中 的 和 端点缺少 配置，导致权限拦截器对已认证用户跳过 RBAC 校验，攻击者使用任意有效登录令牌即可获取敏感用户信息（账户名、真实姓名、邮箱、电话、最后登录 IP、角色分配等）。 参考链接： - GitHub Issue #118 - https://github.com/tylergum/Guns - https://github.com/tylergum/Guns/blob/2a129477339b35d5c06197099ecaa77d7f22b20e8a1a/cr/main/java/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tyler

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Guns 8.3.5 用户信息泄露漏洞 (CVE-2026-92600)

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Guns 8.3.5 用户信息泄露漏洞 (CVE-2026-92600)

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！