CVE-2026-2676 | GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d API Interface LoginInterceptor.java preHandle improper authorization (Issue 27)

A vulnerability labeled as critical has been found in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-2676. The attack may be performed from remote. In addition, an exploit is available.

This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.