yudao-cloud vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

YU

Product

yudao-cloud

by YunaiV · last CVE Oct 24, 2026

13

CVEs

0

On KEV

8.8

Max CVSS

2

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 7Medium 6Low 0

Severity

All severities13 Critical0 High7 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add yudao-cloud to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-58448	6.5	0%	Jun 30	yudao-cloud < 2026.06 - BPM Module Broken Access Control via process-instance API Affected: before 2026.06
CVE-2026-7678	6.3	0%	May 3	YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection Affected: 2026.01
CVE-2025-15098	6.3	0%	Dec 26	YunaiV yudao-cloud Business Process Management BpmSyncHttpRequestTrigger server-side request forgery Affected: 2025.0; 2025.1; 2025.2; 2025.3; 2025.4; 2025.5; +6 more
CVE-2026-9464	4.7	0%	May 25	YunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgery Affected: 2026.03
CVE-2026-5148	4.7	0%	Mar 30	YunaiV yudao-cloud page sql injection Affected: 2026.01
CVE-2026-116015 New	4.3	0%	Oct 24	yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint Affected: through 2026.09