What is the CVSS score of CVE-2026-2667?

CVE-2026-2667 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Visual Integrated Command And Dispatch Platform are affected by CVE-2026-2667?

Organizations using Rongzhitong Visual Integrated Command and Dispatch Platform should be aware of moderate risk from CVE-2026-2667 rated CVSS 5.3.

Is there a public PoC exploit available for CVE-2026-2667?

Yes, a public proof-of-concept exploit is available for CVE-2026-2667. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-2667?

Within 30 days: Identify affected systems running Rongzhitong Visual Integrated Command and Dispatch Platform and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Visual Integrated Command And Dispatch Platform CVE-2026-2667

MEDIUM

Incorrect Privilege Assignment (CWE-266)

2026-02-18 cna@vuldb.com

Information Disclosure Visual Integrated Command And Dispatch Platform Rongzhitong

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Feb 26, 2026 - 20:32 vuln.today

Public exploit code

CVE Published

Feb 18, 2026 - 21:16 nvd

MEDIUM 5.3

DescriptionCVE.org

A vulnerability has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. The impacted element is an unknown function of the file /dispatch/api?cmd=userinfo. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Visual Integrated Command And Dispatch Platform versions up to 20260206. contains a security vulnerability (CVSS 5.3).

Technical ContextAI

affects Visual Integrated Command And Dispatch Platform. has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. The impacted element is an unknown function of the file /dispatch/api?cmd=userinfo. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.