Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Yunai Clear all filters
TI-2026-41716 CVE-2026-57950 · GHSA-r39c-vf2w-53j7

ruoyi-vue-pro - Incorrect Permission Namespace in ErpSaleOrderController

Priority HIGH 72

ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderController that allows attackers with erp:sale-out permissions to gain unauthorized access to sale orde…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00374 Published 2026-06-29 Fixed CWE-863
TI-2026-41715 CVE-2026-57949 · GHSA-pv3j-frmx-3v9q

ruoyi-vue-pro - Missing Authorization in CRM Follow-up Record GET Endpoint

Priority MEDIUM 64

ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GET /admin-api/crm/follow-up-record/get endpoint that allows authenticated users to read any foll…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00293 Published 2026-06-29 Fixed CWE-862