youlaitech

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

youlaitech records in CISA KEV

No youlaitech vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Youlai-boot · all components

TI-2025-35015 CVE-2025-55469 · GHSA-h67h-6hv5-vfg2

HIGH 82

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00454 Published 2025-11-26 No fix listed CWE-284

TI-2025-35016 CVE-2025-55471 · GHSA-p43m-vh82-h4mp

HIGH 72

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00365 Published 2025-11-26 No fix listed CWE-284

TI-2025-41048 CVE-2025-66735 · GHSA-vfjq-wcxg-p5r3

LOW 39

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2025-12-22 No fix listed CWE-284

TI-2025-41049 CVE-2025-66736 · GHSA-8vpj-fwmm-xmcm

LOW 31

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00319 Published 2025-12-22 No fix listed CWE-284