What is CVE-2026-92601?

CVE-2026-92601 is a medium-severity vulnerability in Stylefeng Guns, classified under Missing Authorization. CVSS score: 6.5/10. Published 2026-09-16.

How severe is CVE-2026-92601?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Stylefeng Guns

CVE-2026-92601

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide notices affecting arbitrary users and departments.

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Stylefeng Guns

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

disclosure@vulncheck.com (issue-tracking)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (technical-description)
disclosure@vulncheck.com (technical-description)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-92601?: CVE-2026-92601 is a medium-severity vulnerability in Stylefeng Guns, classified under Missing Authorization. CVSS score: 6.5/10. Published 2026-09-16.
How severe is CVE-2026-92601?: Medium severity. CVSS v3 base score is 6.5 out of 10.