CVE Tools
Track your stack

Yunaiv

6 CVEs tracked since 2025. Since Sep 2025, none of them reached CISA KEV.

Yunaiv CVEs per month

Sep 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Yunaiv CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-0960
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Yunaiv's monthly top three, with their CVEs summed over those months.

  1. Ruoyi-vue-pro31 month
  2. Yudao-cloud31 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Yunaiv.

  1. CVE-2026-110610ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl5.4
  2. CVE-2026-97325YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect4.3
  3. CVE-2026-97324YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization7.3
  4. CVE-2026-97323YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal6.3
  5. CVE-2026-97322YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting4.3
  6. CVE-2026-97321YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection6.3
  7. CVE-2026-97320YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery6.3
  8. CVE-2026-58448yudao-cloud < 2026.06 - BPM Module Broken Access Control via process-instance API6.5
  9. CVE-2026-13528YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal7.3
  10. CVE-2026-9464YunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgery4.7
  11. CVE-2026-7710YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication7.3
  12. CVE-2026-7679YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken improper authentication7.3
  13. CVE-2026-7678YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection6.3
  14. CVE-2026-5148YunaiV yudao-cloud page sql injection4.7
  15. CVE-2026-5147YunaiV yudao-cloud get-by-website sql injection7.3

The record

Peak rank
#133 in Sep 2025
Busiest month shown
Sep 2025, 6 CVEs
Months with a KEV entry
0 since Sep 2025
Monthly snapshots
1 since 2025
Yunaiv's full record, month by month