---
id: "CVE-2026-111651"
kind: "vulnerability"
aliases: ["CVE-2026-111651"]
title: "Risesoft Digital-Infrastructure: log export leaks other tenants' personnel directories"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["digital-infrastructure", "java", "multi-tenant", "other", "risesoft"]
not_affected_if: ["newer-version", "single-tenant"]
published_at: "2026-10-16T18:17:46+00:00"
first_seen_at: "2026-10-23T21:57:13+00:00"
updated_at: "2026-10-25T03:36:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111651", "first_seen_at": "2026-10-23T21:57:13+00:00"}]
---

# Risesoft Digital-Infrastructure: log export leaks other tenants' personnel directories

Risesoft Digital-Infrastructure through 9.6.11 has a missing authorization check in its log module's DownloadController. An authenticated user can pass another tenant's tenantId to the export endpoints and download XLSX files containing names, login names, organization paths, mobile numbers and emails.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111651

## From the sources

Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module DownloadController that allows authenticated users to export any tenant's personnel directory. Attackers can supply another tenant's tenantId to exportLoginXLS or exportNotLoginXLS to obtain XLSX files with names, login names, organization paths, mobile numbers, and emails.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_