AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-0574

MEDIUM · CVSS 6.3 EPSS 0.30% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-01-04 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.3. It affects Java. Public exploit code or proof-of-concept references have been detected in its references. It may be remotely exploitable.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-0574
Severity
MEDIUM
CVSS
6.3
EPSS
0.30%
Java

Original NVD Description

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified.

Related CVEs

Other vulnerabilities affecting the same vendor(s)