Skip to content
OpenAdvisories

Vendor

Yunai

2 known vulnerabilities.

Products

ruoyi-vue-pro 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-57950

    ruoyi-vue-pro - Incorrect Permission Namespace in ErpSaleOrderController

    ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderController that allows attackers with erp:sale-out permissions to gain unauthorized access to sale order operations by exploiting an incorrect…

    Yunai ruoyi-vue-pro