JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController _enable and _disable endpoints lack the save action annotation, attackers can toggle alarms by id to silence alerts for monitored devices.
2026年10月14日
CVE-2026-110110 [MEDIUM] – JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allo
📑 文章目录



