CVE-2026-96880

Name of the Vulnerable Software and Affected Versions TaleLin lin-cms-spring-boot versions prior to 0.2.2

Description Improper authorization occurs in the book endpoint when manipulating the ID argument within the getBook() function. This issue allows a remote attacker to bypass authorization controls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the getBook() function to minimize the risk of exploitation.