GCVE - cpe:2.3:a:rongzhitong:visual_integrated_command_and_dispatch

Approved changes feed: RSS · Atom

cpe:2.3:a:rongzhitong:visual_integrated_command_and_dispatch_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Rongzhitong (`092a2c1c-08a2-5a9d-b389-8491cb78d6a5`)
Product	Visual Integrated Command And Dispatch Platform (`4977c84b-67b5-5f0b-a115-91241205c9ff`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-18970`	vulnerable	2026-09-16 04:34:02.234559	Rongzhitong Visual Integrated Command and Dispatch Platform findAll sql injection HIGH (7.3) A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/findAll. Executing a manipulation of the argument Name can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-08-05T23:45:36.389Z Updated: 2026-08-06T14:21:24.617Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/386261 https://vuldb.com/vuln/386261/cti https://vuldb.com/cve/CVE-2026-18970 https://vuldb.com/submit/860573 https://ucn9h68n9289.feishu.cn/wiki/UfgVwvpW5iRtLFkZs4icV6LfnGb?from=from_copylink	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18969`	vulnerable	2026-09-16 04:34:01.996494	Rongzhitong Visual Integrated Command and Dispatch Platform upload unrestricted upload HIGH (7.3) A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload. Performing a manipulation of the argument File results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-08-05T23:30:38.952Z Updated: 2026-08-06T15:08:09.527Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/386260 https://vuldb.com/vuln/386260/cti https://vuldb.com/cve/CVE-2026-18969 https://vuldb.com/submit/860572 https://ucn9h68n9289.feishu.cn/wiki/CVIpwknSYiQXejkvw7McPrs1n2g?from=from_copylink	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2669`	vulnerable	2026-06-08 07:55:17.364935	Rongzhitong Visual Integrated Command and Dispatch Platform User delete access control MEDIUM (6.5) A vulnerability was determined in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This impacts an unknown function of the file /dm/dispatch/user/delete of the component User Handler. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-18T21:02:06.522Z Updated: 2026-02-23T10:25:03.419Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346466 https://vuldb.com/?ctiid.346466 https://vuldb.com/?submit.753294 https://github.com/21151213732/CVE/blob/main/VICDP-Unauthorized%20Access3.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2668`	vulnerable	2026-06-08 07:55:17.364439	Rongzhitong Visual Integrated Command and Dispatch Platform User add access control HIGH (7.3) A vulnerability was found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This affects an unknown function of the file /dm/dispatch/user/add of the component User Handler. The manipulation results in improper access controls. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-18T20:32:08.579Z Updated: 2026-02-23T10:20:19.689Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346465 https://vuldb.com/?ctiid.346465 https://vuldb.com/?submit.753283 https://github.com/21151213732/CVE/blob/main/VICDP-Unauthorized%20Access2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2667`	vulnerable	2026-06-08 07:55:17.363868	Rongzhitong Visual Integrated Command and Dispatch Platform api access control MEDIUM (5.3) A vulnerability has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. The impacted element is an unknown function of the file /dispatch/api?cmd=userinfo. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-18T20:32:06.746Z Updated: 2026-02-26T16:18:58.903Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346464 https://vuldb.com/?ctiid.346464 https://vuldb.com/?submit.753262 https://github.com/21151213732/CVE/blob/main/VICDP-Unauthorized%20Access1.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Visual Integrated Command And Dispatch Platform

Notes

PURL mappings

Vulnerability references

Contribute