MEDIUM 6.9 NVD
CVE-2026-93961
A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/uj
A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api/UserController.java of the component UserController. Performing a manipulation of the argument Username results in improper authorization. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
References
- https://github.com/dromara/ujcms/
- https://github.com/dromara/ujcms/issues/22
- https://vuldb.com/cve/CVE-2026-93961
- https://vuldb.com/submit/944238
- https://vuldb.com/vuln/407920
This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-09-20 via NVD.
vulnfeed aggregates 14846 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.