LA
Product
lamp-cloud
by dromara · last CVE Oct 12, 2026
14
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 6Medium 8Low 0
Watch

Add lamp-cloud to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-69100
8.8
1%
Aug 4
LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution
Affected: through 5.6.2
CVE-2026-91996
7.5
0%
Sep 15
lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint
Affected: through 5.10.0
CVE-2026-19758
7.3
1%
Aug 13
dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal
Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +5 more
CVE-2026-19757
7.3
1%
Aug 13
Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +5 more
CVE-2026-94535
7.1
0%
Sep 21
lamp-cloud through 5.10.0 Unauthorized Notification Deletion
Affected: through 5.10.0
CVE-2026-94534
7.1
0%
Sep 21
lamp-cloud through 5.10.0 Unauthorized Profile Modification via PUT endpoints
Affected: through 5.10.0
Showing 6