Is there a public PoC exploit available for CVE-2026-5529?

Yes, a public proof-of-concept exploit is available for CVE-2026-5529. Prioritise patching immediately. EPSS: 0.0%.

Lamp Cloud CVE-2026-5529

Q: What is the CVSS score of CVE-2026-5529?

CVE-2026-5529 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-19007 LOW

Improper Authorization (CWE-285)

2026-04-05 VulDB

Authentication Bypass Lamp Cloud Dromara

2.1

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 05, 2026 - 01:15 euvd

EUVD-2026-19007

Analysis Generated

Apr 05, 2026 - 01:15 vuln.today

CVE Published

Apr 05, 2026 - 00:15 nvd

MEDIUM 5.3

DescriptionCVE.org

A vulnerability was detected in Dromara lamp-cloud up to 5.8.1. This vulnerability affects the function pageUser of the file /defUser/pageUser of the component DefUserController. Performing a manipulation results in improper authorization. The attack can be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Improper authorization in Dromara lamp-cloud up to version 5.8.1 allows authenticated remote attackers to bypass access controls in the DefUserController pageUser endpoint, gaining unauthorized read access to sensitive user information. The CVSS score of 4.3 reflects low confidentiality impact with network accessibility and low attack complexity; however, public exploit code availability and vendor non-responsiveness increase real-world risk despite the modest base score.

Technical ContextAI

The vulnerability is an authorization bypass (CWE-285: Improper Authorization) in the DefUserController class, specifically in the pageUser function exposed at /defUser/pageUser. The attack involves manipulation of request parameters that circumvent role-based or attribute-based access control checks, allowing authenticated users to access data beyond their intended privilege level. The vulnerability affects the Dromara lamp-cloud application, a cloud-based service management platform built on Spring Boot architecture. The affected versions include all releases up to and including 5.8.1, with the CPE cpe:2.3:a:dromara:lamp-cloud:*:*:*:*:*:*:*:* indicating the entire product line is potentially vulnerable.

RemediationAI

Upgrade Dromara lamp-cloud to a version newer than 5.8.1 immediately; however, no specific patched version has been confirmed from vendor communication as the project has not responded to early disclosure. Monitor the official Dromara lamp-cloud GitHub repository (https://github.com/dromara/lamp-cloud) and VulDB (https://vuldb.com/vuln/355282) for vendor-released patches. In the interim, implement network-level access restrictions to the /defUser/pageUser endpoint, restrict authentication tokens to users requiring pageUser functionality, and audit access logs for suspicious requests to this endpoint. Consider applying a Web Application Firewall rule to block parameter manipulation attempts targeting the pageUser function. This vulnerability requires authenticated access (PR:L), so review user authentication credentials and disable unnecessary service accounts with lamp-cloud access.