What’s Vulnerable › Products

yangzongzhuan RuoYi-Vue vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your yangzongzhuan RuoYi-Vue version is affected

Latest yangzongzhuan RuoYi-Vue vulnerabilities

• CVE-2026-76576 — yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal (CVSS 4.3)
• CVE-2026-9374 — yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload (CVSS 6.3)
• CVE-2025-4537 — yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie (CVSS 3.1)