Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 15:11:19 +0000 CVE-2026-91996 — lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint https://db.gcve.eu/vuln/cve-2026-91996 <p><strong>Affected:</strong> dromara lamp-cloud</p> <p>lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, allowing unauthenticated attackers to read the server&#39;s full JVM system property map. Attackers can send POST requests to /defGenProject/anno/getProperties to retrieve sensitive information including JVM classpath, filesystem paths, operating system details, and startup secrets.</p> <p><strong>Affected:</strong> dromara lamp-cloud</p> <p>lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, allowing unauthenticated attackers to read the server&#39;s full JVM system property map. Attackers can send POST requests to /defGenProject/anno/getProperties to retrieve sensitive information including JVM classpath, filesystem paths, operating system details, and startup secrets.</p> https://db.gcve.eu/vuln/cve-2026-91996