zuihou

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

zuihou records in CISA KEV

No zuihou vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-74422 CVE-2026-110763

IDOR in lamp-boot lets users read employee department membership

MEDIUM 57

lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth module's /anyone/findDeptByCompany endpoint that skips URI permission checks.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00208 Published 2026-10-14 No fix listed CWE-639

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0