All 3 CVE vulnerabilities found in RuoYi-Vue, with AI-generated Chinese analysis, references, and POCs.
Vendor: yangzongzhuan
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-76576 | yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal CWE-22 | 4.3 | Medium | 2026-08-19 |
| CVE-2026-9374 | yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload CWE-434 | 6.3 | Medium | 2026-05-24 |
| CVE-2025-4537 | yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie CWE-315 | 3.1 | Low | 2025-05-11 |
All 3 known CVE vulnerabilities affecting RuoYi-Vue with full Chinese analysis, references, and POCs where available.