一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月14日

CVE-2026-110110 [MEDIUM] – JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allo

未分类
📑 文章目录

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController _enable and _disable endpoints lack the save action annotation, attackers can toggle alarms by id to silence alerts for monitored devices.