LA
Product
lamp-cloud
14
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 6Medium 8Low 0
Watch
Add lamp-cloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-69100 | 8.8 | Aug 4 | LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution Affected: through 5.6.2 |
| CVE-2026-91996 | 7.5 | Sep 15 | lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint Affected: through 5.10.0 |
| CVE-2026-19758 | 7.3 | Aug 13 | dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +5 more |
| CVE-2026-19757 | 7.3 | Aug 13 | Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +5 more |
| CVE-2026-94535 | 7.1 | Sep 21 | lamp-cloud through 5.10.0 Unauthorized Notification Deletion Affected: through 5.10.0 |
| CVE-2026-94534 | 7.1 | Sep 21 | lamp-cloud through 5.10.0 Unauthorized Profile Modification via PUT endpoints Affected: through 5.10.0 |
| CVE-2026-109168 | 6.5 | Oct 12 | lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId Affected: through 5.10.1 |
| CVE-2026-109166 | 6.5 | Oct 12 | lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById Affected: through 5.10.1 |
| CVE-2026-94533 | 6.5 | Sep 21 | lamp-cloud through 5.10.0 Unauthorized File Download via /anyone/file Affected: through 5.10.0 |
| CVE-2026-94532 | 6.5 | Sep 21 | lamp-cloud through 5.10.0 Unauthorized User Profile Access via getUserInfoById Affected: through 5.10.0 |
| CVE-2026-19756 | 6.3 | Aug 13 | Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +5 more |
| CVE-2026-9498 | 6.3 | May 25 | Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine Affected: 5.6.0; 5.6.1; 5.6.2 |
| CVE-2026-94536 | 4.3 | Sep 21 | lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource Affected: through 5.10.0 |
| CVE-2026-5529 | 4.3 | Apr 5 | Dromara lamp-cloud DefUserController pageUser improper authorization Affected: 5.8.0; 5.8.1 |
Showing 14