yudao-cloud vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

YU

Product

yudao-cloud

by YunaiV · last CVE Oct 24, 2026

13

CVEs

0

On KEV

8.8

Max CVSS

2

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 7Medium 6Low 0

Severity

All severities13 Critical0 High7 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add yudao-cloud to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-10987	8.8	0%	Sep 26	YunaiV yudao-cloud HTTP Request transfer improper authorization Affected: 2025.09
CVE-2025-10277	8.8	0%	Sep 12	YunaiV yudao-cloud submit improper authorization Affected: 2025.09
CVE-2025-10275	8.8	0%	Sep 12	YunaiV yudao-cloud transfer improper authorization Affected: 2025.09
CVE-2026-7710	7.3	0%	May 3	YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +3 more
CVE-2026-7679	7.3	0%	May 3	YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken improper authentication Affected: 2026.01
CVE-2026-5147	7.3	0%	Mar 30	YunaiV yudao-cloud get-by-website sql injection Affected: 2026.01
CVE-2026-116016 New	7.1	0%	Oct 24	yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header Affected: through 2026.09