{"id":"CVE-2026-111651","kind":"vulnerability","aliases":["CVE-2026-111651"],"related":[],"title":"Risesoft Digital-Infrastructure: log export leaks other tenants' personnel directories","description":"Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module DownloadController that allows authenticated users to export any tenant's personnel directory. Attackers can supply another tenant's tenantId to exportLoginXLS or exportNotLoginXLS to obtain XLSX files with names, login names, organization paths, mobile numbers, and emails.","summary":"Risesoft Digital-Infrastructure through 9.6.11 has a missing authorization check in its log module's DownloadController. An authenticated user can pass another tenant's tenantId to the export endpoints and download XLSX files containing names, login names, organization paths, mobile numbers and emails.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["digital-infrastructure","java","multi-tenant","other","risesoft"],"not_affected_if":["newer-version","single-tenant"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-16T18:17:46+00:00","first_seen_at":"2026-10-23T21:57:13+00:00","triaged_at":"2026-10-25T03:36:35+00:00","updated_at":"2026-10-25T03:36:35+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-25T03:36:35Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"Risesoft Digital-Infrastructure: log export leaks other tenants' personnel directories","impact":"medium","summary":"Risesoft Digital-Infrastructure through 9.6.11 has a missing authorization check in its log module's DownloadController. An authenticated user can pass another tenant's tenantId to the export endpoints and download XLSX files containing names, login names, organization paths, mobile numbers and emails.","category":"other","nicknames":[],"who_cares":["risesoft","digital-infrastructure","multi-tenant","java"],"confidence":0.6,"needs_auth":"yes","worst_case":"Authenticated users read other tenants' personnel contact data.","analyst_note":"Check the NVD entry and vendor advisory for the fixed version and whether exportNotLoginXLS requires authentication at all.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["single-tenant","newer-version"],"who_is_affected":"Organizations running Risesoft Digital-Infrastructure at or below 9.6.11 in a multi-tenant setup, where more than one tenant shares an instance. Single-tenant deployments and installs on a newer version are not described as exposed by the sources.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000569,"input_tokens":3353,"output_tokens":468,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-111651':14A,17A '-2026':13A,16A '9.6.11':32B,76C 'allow':88C 'anoth':49B,101C 'attack':98C 'authent':45B,89C 'author':36B,80C 'check':37B 'contain':61B,77C 'cve':12A,15A 'digit':3A,19B,29B,73C 'digital-infrastructur':2A,18B,28B,72C 'directori':11A,97C 'download':58B 'downloadcontrol':43B,86C 'email':70B,122C 'endpoint':56B 'export':6A,55B,92C 'exportloginxl':106C 'exportnotloginxl':108C 'file':60B,112C 'infrastructur':4A,20B,30B,74C 'java':21B 'leak':7A 'log':5A,40B,84C 'login':63B,115C 'miss':35B,79C 'mobil':67B,119C 'modul':41B,85C 'multi':23B 'multi-ten':22B 'name':62B,64B,114C,116C 'number':68B,120C 'obtain':110C 'organ':65B,117C 'pass':48B 'path':66B,118C 'personnel':10A,96C 'risesoft':1A,26B,27B,71C 'suppli':100C 'tenant':9A,24B,50B,94C,102C 'tenantid':52B,104C 'user':46B,90C 'vulner':81C 'xlsx':59B,111C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Risesoft Digital-Infrastructure at or below 9.6.11 in a multi-tenant setup, where more than one tenant shares an instance. Single-tenant deployments and installs on a newer version are not described as exposed by the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-16T18:17:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111651","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111651","severity":null,"published_at":"2026-10-16T18:17:46+00:00","modified_at":"2026-10-16T22:17:21+00:00","first_seen_at":"2026-10-23T21:57:13+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}