PT-2026-20508 · Unknown · Rongzhitong Visual Integrated Command/Dispatch Platform

Xxllyy · Publicado 2026-02-18 · Atualizado 2026-02-19 · CVE-2026-2669

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Rongzhitong Visual Integrated Command and Dispatch Platform versions prior to 20260207

Description A security issue exists in Rongzhitong Visual Integrated Command and Dispatch Platform. Improper access controls can be triggered by manipulating the ID argument of a file, /dm/dispatch/user/delete, within the User Handler component. Remote exploitation is possible. The details of the affected function are unknown. The vulnerability has been publicly disclosed, and the vendor was notified but did not respond.

Recommendations Versions prior to 20260207 should be updated. As a temporary workaround, restrict access to the /dm/dispatch/user/delete file.

Exploit

Correção

Improper Access Control

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-284

CWE-266

Identificadores relacionados

CVE-2026-2669

Produtos afetados

Rongzhitong Visual Integrated Command/Dispatch Platform

Referências · 9

• 🔥 https://github.com/21151213732/CVE/blob/main/VICDP-Unauthorized%20Access3.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2669 · Nota de Segurança
• https://vuldb.com/?submit.753294 · Nota
• https://twitter.com/CVEnew/status/2024233220988961131 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-2669 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2024304956400980398 · Publicação no Twitter
• https://vuldb.com/?id.346466 · Nota
• https://vuldb.com/?ctiid.346466 · Nota
• https://t.me/CVEtracker/45023 · Publicação no Telegram