Products: 4
Vulnerabilities: 75
Known Exploited: 0
16
Critical Level Threats
11
High Level Threats
38
Medium Level Threats
10
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-108825
yangzongzhuan RuoYi authDataScope checkRoleAllowed privileges management
Last Modified: Oct 15, 2026
Published: Oct 12, 2026
CVE-2026-108803
y_project RuoYi Disable API add changeStatus session expiration
Last Modified: Oct 13, 2026
Published: Oct 12, 2026
CVE-2026-108802
y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting
Last Modified: Oct 12, 2026
Published: Oct 12, 2026
CVE-2026-108800
yangzongzhuan RuoYi cross-site request forgery
Last Modified: Oct 15, 2026
Published: Oct 12, 2026
CVE-2026-71807
In RuoYi-Cloud-Plus <= 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler/related user. Authenticated low-privileged remote attackers can read sensitive workflow task details (/task/getTask/{taskId}) and trigger unauthorized workflow executions (/task/startWorkFlow).
Last Modified: Sep 21, 2026
Published: Sep 09, 2026
Items Per Page
