anonhaven

CVE-2026-67687

NONE
Updated Aug 07, 2026
Java
Parameter Value
Vendor Java
Public PoC Yes

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java

References 2

https://github.com/qflksheep/CVE-2026-67687-ICS-Park-Smart-Park-Management-Syst…
cve@mitre.org
https://github.com/qflksheep/ICS-Park-Smart-Park-Management-System-v2.0-POC/blo…
cve@mitre.org
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-71497

Jhy

4.7

CVE-2026-19110

Java

1.9

CVE-2026-71270

Java

8.6

CVE-2026-18903

Yeqifu

2.1

CVE-2026-69702

Aizuda

7.1