CVE-2026-111689 is an authorization bypass vulnerability in XBoot through 3.3.4. This vulnerability allows authenticated users to read user records of any department by ignoring role data scope. The affected product, XBoot, is a software solution that provides boot-related functionality. The vulnerability has a medium severity score of 5.3 and is classified as an authorization bypass. The CVE record was p [truncated]
CVE-2026-111688 is an authorization bypass vulnerability in Exrick XBoot through 3.3.4. Authenticated users can evade role data-scope restrictions by manipulating the openDataFilter parameter in department getByParentId or search endpoints, potentially retrieving the entire organization's department tree and names outside their assigned scope. System administrators and security teams should assess their a [truncated]
