YunaiV vulnerabilities
26 published CVEs name YunaiV among the affected products.
- 26Published CVEs26 of them scored
- 20Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116007
YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication
YunaiV · ruoyi-vue-pro
Medium6.3 - CVE-2026-116006
YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication
YunaiV · ruoyi-vue-pro
Medium6.9 - CVE-2026-116016
yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header
YunaiV · yudao-cloud
High7.1 - CVE-2026-116015
yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint
YunaiV · yudao-cloud
Medium5.3 - CVE-2026-110610
ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl
YunaiV · ruoyi-vue-pro
Medium5.3 - CVE-2026-97325
YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect
YunaiV · ruoyi-vue-pro
Medium5.3 - CVE-2026-97324
YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization
YunaiV · ruoyi-vue-pro
Medium6.9 - CVE-2026-97323
YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal
YunaiV · ruoyi-vue-pro
Medium5.3 - CVE-2026-97322
YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting
YunaiV · ruoyi-vue-pro
Medium5.3 - CVE-2026-97321
YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection
YunaiV · ruoyi-vue-pro
Medium5.3