Multiple Vulnerabilities Disclosed in Library and Smart Management Systems

Two vulnerabilities have been disclosed on February 16, 2026, affecting the zhanghuanhao LibrarySystem and LigeroSmart. CVE-2026-2549 involves improper access controls in the BookController.java file, while CVE-2026-2547 allows for cross-site scripting via the AgentDashboard function. Both vulnerabilities can be exploited remotely, and the respective projects have not responded to the reported issues.