CVE-2026-67687

HIGH

ICS-Park Smart Park Management System 2.0 - Unauthenticated Privilege Escalation via Role and User Controller Endpoints

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-67687. PoCs published by qflksheep.

AI-analyzed exploit summary The repository contains functional exploit code for CVE-2026-67687, a vertical privilege escalation vulnerability in ICS-Park Smart Park Management System v2.0. The PoC demonstrates how an ordinary user can create an administrator account by exploiting missing authorization checks in the RoleController.save() and UserController.update() endpoints.

Description

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java

Exploits (1)

github WORKING POC

by qflksheep · poc

https://github.com/qflksheep/CVE-2026-67687-ICS-Park-Smart-Park-Management-System-v2.0

View Code ZIP pw:eip

The repository contains functional exploit code for CVE-2026-67687, a vertical privilege escalation vulnerability in ICS-Park Smart Park Management System v2.0. The PoC demonstrates how an ordinary user can create an administrator account by exploiting missing authorization checks in the RoleController.save() and UserController.update() endpoints.

Classification

Working Poc 98%

Attack Type

Auth Bypass

Complexity

Moderate

Reliability

Reliable

Target: ICS-Park Smart Park Management System v2.0

Auth required

Prerequisites: Valid credentials for an ordinary user account (e.g., 'ry' with password '123456') · Network access to the target system's API endpoints

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1078 - Valid Accounts

mistral-large-3 · analyzed Aug 07, 2026 Full analysis →