CVE-2026-92402

Name of the Vulnerable Software and Affected Versions ChangeWeDer crm (affected versions not specified)

Description A security flaw allows remote attackers to bypass authorization. The issue resides in the index() function within the UserController.java file of the top.upstudy.crm.controller.UserController component.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the index() function in the UserController.java file to minimize the risk of exploitation.