Advisories · Technology

yangzongzhuan RuoYi-Vue.

Every CVE that names yangzongzhuan RuoYi-Vue among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-122016 CVE record

CVSS 5.3 Medium

yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management
- yangzongzhuan RuoYi-Vue
- Privilege escalation
Not analysed yet 4 Nov 2026
CVE-2026-76576 CVE record

CVSS 5.3 Medium

yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal
- yangzongzhuan RuoYi-Vue
- Path traversal
Not analysed yet 19 Aug 2026
CVE-2026-9374 CVE record

CVSS 5.3 Medium

yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload
- yangzongzhuan RuoYi-Vue
- Broken access control
- Unrestricted file upload
Not analysed yet 24 May 2026
CVE-2025-4537 CVE record

CVSS 2.3 Low

yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie
- yangzongzhuan RuoYi-Vue
- Information disclosure
- CWE-315
Not analysed yet 11 May 2025