ruoyi-vue-pro vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RU

Product

ruoyi-vue-pro

by YunaiV · last CVE Oct 25, 2026

13

CVEs

0

On KEV

8.8

Max CVSS

3

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 6Medium 6Low 1

Severity

All severities13 Critical0 High6 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ruoyi-vue-pro to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-10988	8.8	0%	Sep 26	YunaiV ruoyi-vue-pro transfer improper authorization Affected: 2025.09
CVE-2025-10278	8.8	0%	Sep 12	YunaiV ruoyi-vue-pro transfer improper authorization Affected: 2025.09
CVE-2025-10276	8.8	0%	Sep 12	YunaiV ruoyi-vue-pro transfer improper authorization Affected: 2025.09
CVE-2026-116006 New	7.3	1%	Oct 25	YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication Affected: 2026.09
CVE-2026-97324	7.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization Affected: 2026.08
CVE-2026-13528	7.3	1%	Jun 29	YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal Affected: 2026.04-jdk8-SNAPSHOT