/

CVE-2026-121556

Severity:

HIGH RISK

(8.3)

CVE-2026-121556

Deferred

Vulnerability type

Category:

CWE:

CWE-639

Impact:

Severity:

HIGH RISK

(8.3)

CVSS version:

3.1

Catch this CVE while code is being written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Sources

SourceLink
github.comgithub.com/beecue/FastBee/commit/3393e3223965a9dc9682dfb2bd37635fffa0fbd2
github.comgithub.com/beecue/FastBee/issues/32
github.comgithub.com/kerwincui/FastBee
github.comgithub.com/kerwincui/FastBee/blob/v2.1.0/springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ProductController.java#L77-L141
github.comgithub.com/kerwincui/FastBee/blob/v2.1.0/springboot/fastbee-service/fastbee-iot-service/src/main/java/com/fastbee/iot/service/impl/ProductServiceImpl.java#L72-L92
github.comgithub.com/kerwincui/FastBee/blob/v2.1.0/springboot/fastbee-service/fastbee-iot-service/src/main/resources/mapper/iot/ProductMapper.xml#L37-L67
vulncheck.comvulncheck.com/advisories/fastbee-through-2.1.0-idor-via-iot-product-by-id-endpoints
Find out what's already
exploitable in your codebase.