PT-2026-20508 · Unknown · Rongzhitong Visual Integrated Command/Dispatch Platform

Xxllyy · Published 2026-02-18 · Updated 2026-02-19 · CVE-2026-2669

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Rongzhitong Visual Integrated Command and Dispatch Platform versions prior to 20260207

Description A security issue exists in Rongzhitong Visual Integrated Command and Dispatch Platform. Improper access controls can be triggered by manipulating the ID argument of a file, /dm/dispatch/user/delete, within the User Handler component. Remote exploitation is possible. The details of the affected function are unknown. The vulnerability has been publicly disclosed, and the vendor was notified but did not respond.

Recommendations Versions prior to 20260207 should be updated. As a temporary workaround, restrict access to the /dm/dispatch/user/delete file.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2026-2669

Affected Products

Rongzhitong Visual Integrated Command/Dispatch Platform

References · 9

• 🔥 https://github.com/21151213732/CVE/blob/main/VICDP-Unauthorized%20Access3.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2669 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2669 · Vendor Advisory
• https://vuldb.com/?submit.753294 · Note
• https://twitter.com/CVEnew/status/2024233220988961131 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2024304956400980398 · Twitter Post
• https://vuldb.com/?id.346466 · Note
• https://vuldb.com/?ctiid.346466 · Note
• https://t.me/CVEtracker/45023 · Telegram Post