Read the docs

Yunai

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Yunai records in CISA KEV

No Yunai vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-41716 CVE-2026-57950 · GHSA-r39c-vf2w-53j7

ruoyi-vue-pro - Incorrect Permission Namespace in ErpSaleOrderController

Priority HIGH 72

ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderController that allows attackers with erp:sale-out permissions to gain unauthorized access to sale orde…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00374 Published 2026-06-29 Fixed CWE-863
TI-2026-41715 CVE-2026-57949 · GHSA-pv3j-frmx-3v9q

ruoyi-vue-pro - Missing Authorization in CRM Follow-up Record GET Endpoint

Priority MEDIUM 64

ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GET /admin-api/crm/follow-up-record/get endpoint that allows authenticated users to read any foll…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00293 Published 2026-06-29 Fixed CWE-862
Open these records in search →