CVE-2026-106705 - ELADMIN Improper Access Control Vulnerability
CVE ID :CVE-2026-106705 Published : Oct. 16, 2026, 3:17 p.m. | 17 minutes ago Description :ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request...