zoujingli CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM zoujingli CVE published 2026-10-16

CVE-2026-111655

CVE-2026-111655 is a medium-severity vulnerability in ThinkAdmin think-plugs-admin through version 1.0.81, allowing non-super administrators to read and overwrite other administrators' file records via the admin/file.edit endpoint. This insecure direct object reference vulnerability enables attackers with the admin/file.edit node to request or POST a target ID with columns like xurl, hash, or uuid to view [truncated]