Known Vulnerabilities for Yudao-cloud by Iocoder
Listed below are 3 of the newest known vulnerabilities associated with "Yudao-cloud" by "Iocoder".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116016 json | yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level... | Not Provided | 2026-10-24 | 2026-11-03 |
| CVE-2026-116015 json | yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows a... | Not Provided | 2026-10-24 | 2026-10-26 |
| CVE-2026-110610 json | ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that ... | Not Provided | 2026-10-14 | 2026-10-26 |
| CVE-2026-7710 json | A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file... | Not Provided | 2026-05-04 | 2026-10-27 |
| CVE-2026-7679 json | A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file... | Not Provided | 2026-05-03 | 2026-10-27 |
| CVE-2026-7678 json | A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-... | Not Provided | 2026-05-03 | 2026-10-27 |
| CVE-2026-5147 json | A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This affects an unknown part of the file /admin-api/... | Not Provided | 2026-03-30 | 2026-10-26 |
| CVE-2025-15098 json | A vulnerability was determined in YunaiV yudao-cloud up to 2025.11. This affects the function BpmHttpCallbackTrigger/BpmSyncH... | Not Provided | 2025-12-26 | 2026-10-27 |
| CVE-2025-10987 json | A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of t... | Not Provided | 2025-09-26 | 2026-10-27 |
| CVE-2025-10277 json | A vulnerability was detected in YunaiV yudao-cloud up to 2025.09. This issue affects some unknown processing of the file /crm... | Not Provided | 2025-09-12 | 2026-10-27 |