A vulnerability was found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. It has been classified as critical. The impacted element is an unknown function of the file /dispatch/api?cmd=userinfo. The manipulation leads to improper access controls.
This vulnerability is listed as CVE-2026-2667. The attack may be initiated remotely. In addition, an exploit is available.
It is recommended to apply restrictive firewalling.
The vendor was contacted early about this disclosure but did not respond in any way.
