CVE Intelligence

Realjerrytang vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Realjerrytang products: 1 record(s), with severity, exploitation and fixes.

Tacomall 1

Exploited only (KEV) →

CVE-2026-102293 High · 7.3 CWE-266 Sep 29, 2026
realjerrytang tacomall api-admin Backend ApiMaApplication.java OrgStaffServiceImpl.add improper authorization
A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.