ruoyi-vue-pro vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RU

Product

ruoyi-vue-pro

by YunaiV · last CVE Oct 25, 2026

13

CVEs

0

On KEV

8.8

Max CVSS

3

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 6Medium 6Low 1

Severity

All severities13 Critical0 High6 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ruoyi-vue-pro to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-10988	8.8	0%	Sep 26	YunaiV ruoyi-vue-pro transfer improper authorization Affected: 2025.09
CVE-2025-10278	8.8	0%	Sep 12	YunaiV ruoyi-vue-pro transfer improper authorization Affected: 2025.09
CVE-2025-10276	8.8	0%	Sep 12	YunaiV ruoyi-vue-pro transfer improper authorization Affected: 2025.09
CVE-2026-116006 New	7.3	1%	Oct 25	YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication Affected: 2026.09
CVE-2026-97324	7.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization Affected: 2026.08
CVE-2026-13528	7.3	1%	Jun 29	YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal Affected: 2026.04-jdk8-SNAPSHOT
CVE-2026-97323	6.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal Affected: 2026.08
CVE-2026-97321	6.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection Affected: 2026.08
CVE-2026-97320	6.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery Affected: 2026.08
CVE-2026-110610	5.4	0%	Oct 14	ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl Affected: through 2026.09
CVE-2026-97325	4.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect Affected: 2026.08
CVE-2026-97322	4.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting Affected: 2026.08
CVE-2026-116007 New	3.7	0%	Oct 25	YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication Affected: 2026.09