Skip to content
OpenAdvisories

Vendor

DataLinkDC

9 known vulnerabilities.

Products

Dinky 9
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-70559 Public exploit

    Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAll

    Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that short-circuits the class-level @SaCheckLogin, so the Sa-Token interceptor lets the request through with no session or role check. Any r…

    DataLinkDC Dinky