Login Request a demo
LA
Product
lamp-cloud
by dromara · last CVE Oct 12, 2026
14
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 0High 6Medium 8Low 0
Severity
All severities14Critical0High6Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lamp-cloud to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-109168
6.5
0%
Oct 12
lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId
Affected: through 5.10.1
CVE-2026-109166
6.5
0%
Oct 12
lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById
Affected: through 5.10.1
CVE-2026-94533
6.5
0%
Sep 21
lamp-cloud through 5.10.0 Unauthorized File Download via /anyone/file
Affected: through 5.10.0
CVE-2026-94532
6.5
0%
Sep 21
lamp-cloud through 5.10.0 Unauthorized User Profile Access via getUserInfoById
Affected: through 5.10.0
CVE-2026-19756
6.3
0%
Aug 13
Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal
Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +5 more
CVE-2026-9498
6.3
0%
May 25
Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine
Affected: 5.6.0; 5.6.1; 5.6.2
CVE-2026-94536
4.3
0%
Sep 21
lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource
Affected: through 5.10.0
CVE-2026-5529
4.3
0%
Apr 5
Dromara lamp-cloud DefUserController pageUser improper authorization
Affected: 5.8.0; 5.8.1
Showing 8