Advisories · Technology

YunaiV ruoyi-vue-pro.

Every CVE that names YunaiV ruoyi-vue-pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116007 CVE record

CVSS 6.3 Medium

YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Authentication bypass
- CWE-799
Not analysed yet 25 Oct 2026
CVE-2026-116006 CVE record

CVSS 6.9 Medium

YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Authentication bypass
Not analysed yet 25 Oct 2026
CVE-2026-110610 CVE record

CVSS 5.3 Medium

ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl
- YunaiV ruoyi-vue-pro
- Server-side request forgery (SSRF)
Not analysed yet 14 Oct 2026
CVE-2026-97325 CVE record

CVSS 5.3 Medium

YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Open redirect
Not analysed yet 24 Sept 2026
CVE-2026-97324 CVE record

CVSS 6.9 Medium

YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Privilege escalation
- Broken access control
Not analysed yet 24 Sept 2026
CVE-2026-97323 CVE record

CVSS 5.3 Medium

YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Path traversal
Not analysed yet 24 Sept 2026
CVE-2026-97322 CVE record

CVSS 5.3 Medium

YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 24 Sept 2026
CVE-2026-97321 CVE record

CVSS 5.3 Medium

YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Other injection
- SQL injection
Not analysed yet 24 Sept 2026
CVE-2026-97320 CVE record

CVSS 5.3 Medium

YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Server-side request forgery (SSRF)
Not analysed yet 24 Sept 2026
CVE-2026-13528 CVE record

CVSS 6.9 Medium

YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Path traversal
Not analysed yet 29 Jun 2026
CVE-2025-10988 CVE record

CVSS 5.3 Medium

YunaiV ruoyi-vue-pro transfer improper authorization
- YunaiV ruoyi-vue-pro
- Privilege escalation
- Broken access control
Not analysed yet 26 Sept 2025
CVE-2025-10278 CVE record

CVSS 5.3 Medium

YunaiV ruoyi-vue-pro transfer improper authorization
- YunaiV ruoyi-vue-pro
- Privilege escalation
- Broken access control
Not analysed yet 12 Sept 2025
CVE-2025-10276 CVE record

CVSS 5.3 Medium

YunaiV ruoyi-vue-pro transfer improper authorization
- YunaiV ruoyi-vue-pro
- Privilege escalation
- Broken access control
Not analysed yet 12 Sept 2025