Login Request a demo
RU
Product
RuoYi-Vue
by yangzongzhuan · last CVE Aug 19, 2026
3
CVEs
0
On KEV
6.3
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 1
Severity
All severities3Critical0High0Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add RuoYi-Vue to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-9374
6.3
0%
May 24
yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload
Affected: 3.9.0; 3.9.1; 3.9.2
CVE-2026-76576
4.3
0%
Aug 19
yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal
Affected: 3.9.0; 3.9.1; 3.9.2
CVE-2025-4537
3.1
0%
May 11
yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie
Affected: 3.8.0; 3.8.1; 3.8.2; 3.8.3; 3.8.4; 3.8.5; +4 more
Showing 3