agentprime: yunaiv-yudao-cloudEvery new CVE for yunaiv-yudao-cloud.https://agentprime.io/CVE-2026-116016: yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Headerhttps://agentprime.io/advisories/CVE-2026-116016/https://agentprime.io/advisories/CVE-2026-116016/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 Oct 2026 11:40:33 GMTCVECVE-2026-116015: yudao-cloud through 2026.09 IDOR via after-sale-log list endpointhttps://agentprime.io/advisories/CVE-2026-116015/https://agentprime.io/advisories/CVE-2026-116015/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 Oct 2026 11:40:32 GMTCVECVE-2026-58448: yudao-cloud < 2026.06 - BPM Module Broken Access Control via process-instance APIhttps://agentprime.io/advisories/CVE-2026-58448/https://agentprime.io/advisories/CVE-2026-58448/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 21:06:21 GMTCVECVE-2026-9464: YunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-9464/https://agentprime.io/advisories/CVE-2026-9464/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 May 2026 14:00:16 GMTCVECVE-2026-7710: YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authenticationhttps://agentprime.io/advisories/CVE-2026-7710/https://agentprime.io/advisories/CVE-2026-7710/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 03 May 2026 23:15:17 GMTCVECVE-2026-7679: YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken improper authenticationhttps://agentprime.io/advisories/CVE-2026-7679/https://agentprime.io/advisories/CVE-2026-7679/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 03 May 2026 04:15:10 GMTCVECVE-2026-7678: YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injectionhttps://agentprime.io/advisories/CVE-2026-7678/https://agentprime.io/advisories/CVE-2026-7678/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 03 May 2026 04:00:14 GMTCVECVE-2026-5148: YunaiV yudao-cloud page sql injectionhttps://agentprime.io/advisories/CVE-2026-5148/https://agentprime.io/advisories/CVE-2026-5148/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 19:45:10 GMTCVECVE-2026-5147: YunaiV yudao-cloud get-by-website sql injectionhttps://agentprime.io/advisories/CVE-2026-5147/https://agentprime.io/advisories/CVE-2026-5147/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 18:45:13 GMTCVECVE-2025-15098: YunaiV yudao-cloud Business Process Management BpmSyncHttpRequestTrigger server-side request forgeryhttps://agentprime.io/advisories/CVE-2025-15098/https://agentprime.io/advisories/CVE-2025-15098/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Dec 2025 03:02:06 GMTCVECVE-2025-10987: YunaiV yudao-cloud HTTP Request transfer improper authorizationhttps://agentprime.io/advisories/CVE-2025-10987/https://agentprime.io/advisories/CVE-2025-10987/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 00:02:10 GMTCVECVE-2025-10277: YunaiV yudao-cloud submit improper authorizationhttps://agentprime.io/advisories/CVE-2025-10277/https://agentprime.io/advisories/CVE-2025-10277/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Sep 2025 03:02:07 GMTCVECVE-2025-10275: YunaiV yudao-cloud transfer improper authorizationhttps://agentprime.io/advisories/CVE-2025-10275/https://agentprime.io/advisories/CVE-2025-10275/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Sep 2025 01:02:09 GMTCVE