Tenable Multiple Vulnerabilities Disclosed in Library and Smart Management Systems
Article Content
Browse articles 
Two vulnerabilities have been disclosed on February 16, 2026, affecting the zhanghuanhao LibrarySystem and LigeroSmart. CVE-2026-2549 involves improper access controls in the BookController.java file, while CVE-2026-2547 allows for cross-site scripting via the AgentDashboard function. Both vulnerabilities can be exploited remotely, and the respective projects have not responded to the reported issues.
Ask AI about this cluster
Answers cite the sources they use
Updated 227d ago How this analysis works
Timeline
2026-02-16
CVE-2026-2549 published
2026-02-16
CVE-2026-2547 published
More articles in this cluster (19)
Following this threat?
Track CVE-2026-2517 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Path Traversal Vulnerability in FearlessCMS Disclosed A critical vulnerability, CVE-2026-63190, has been identified in FearlessCMS, a flat-file content management system, allowing unauthenticated attackers to execute privileged PHP scripts in the `/admin/` directory. This flaw arises from improper authentication and path validation, enabling attackers to perform path… 
WordPress Vulnerability XSS2Shell Leads to Remote Code Execution A vulnerability in WordPress, identified as CVE-2026-64638, allows remote code execution via a pre-authentication cross-site scripting (XSS) attack. Disclosed by pwn.ai in August 2026, the flaw affects all versions of WordPress Core, impacting over 500 million websites. The vulnerability arises from improper handling…