dromara lamp-cloud vulnerabilities
14 published CVEs name dromara lamp-cloud among the affected products.
- 14Published CVEs14 of them scored
- 14Last 12 monthspublished in the last year
- 0Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-109168
lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId
dromara · lamp-cloud
High7.1 - CVE-2026-109166
lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById
dromara · lamp-cloud
High7.1 - CVE-2026-94536
lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource
dromara · lamp-cloud
Medium5.3 - CVE-2026-94535
lamp-cloud through 5.10.0 Unauthorized Notification Deletion
dromara · lamp-cloud
High7.1 - CVE-2026-94534
lamp-cloud through 5.10.0 Unauthorized Profile Modification via PUT endpoints
dromara · lamp-cloud
High7.1 - CVE-2026-94533
lamp-cloud through 5.10.0 Unauthorized File Download via /anyone/file
dromara · lamp-cloud
High7.1 - CVE-2026-94532
lamp-cloud through 5.10.0 Unauthorized User Profile Access via getUserInfoById
dromara · lamp-cloud
High7.1 - CVE-2026-91996
lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint
dromara · lamp-cloud
High8.7 - CVE-2026-19758
dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal
dromara · lamp-cloud
Medium6.9 - CVE-2026-19757
Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
Dromara · lamp-cloud
Medium6.9