dromara Exploited Vulnerabilities
Dromara vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Unauthorized Information Disclosure in Lamp-cloud by Dromara
CVE-2026-94536DromaraLamp-cloud👾🟡5.3MEDIUMAuthorization Bypass Vulnerability in lamp-cloud by dromara
CVE-2026-94535DromaraLamp-cloud👾🟡7.1HIGHUser Profile Vulnerability in Lamp-Cloud by Dromara
CVE-2026-94534DromaraLamp-cloud👾🟡7.1HIGHAuthorization Bypass in lamp-cloud Vulnerability Allowing File Access
CVE-2026-94533DromaraLamp-cloud👾🟡7.1HIGHAuthorization Bypass in Lamp-Cloud by Dromara
CVE-2026-94532DromaraLamp-cloud👾🟡7.1HIGHOS Command Injection in Dromara Mayfly-go Product
CVE-2026-92993DromaraMayfly-go👾🟡5.3MEDIUMMissing Authorization Vulnerability in Dromara mayfly-go AI Assistant
CVE-2026-92992DromaraMayfly-go👾🟡5.3MEDIUMUnauthorized Access Vulnerability in lamp-cloud by dromara
CVE-2026-91996DromaraLamp-cloud👾🟡8.7HIGHWorkspace Isolation Bypass in Jpom Product by Dromara
CVE-2026-91993DromaraJpom👾🟡5.3MEDIUMCryptographic Vulnerability in dromara Orion-Visor Affects Key Management
CVE-2026-90510DromaraOrion-visor👾🟡6.9MEDIUMHard-Coded Credential Vulnerability in dromara orion-visor
CVE-2026-90509DromaraOrion-visor👾🟡6.9MEDIUMServer-Side Template Injection in Dromara UJCMS Web-File-Template Endpoint
CVE-2026-78140DromaraUjcms👾🟡5.1MEDIUMPath Traversal Vulnerability in Dromara Lamp-Cloud by Dromara
CVE-2026-19758DromaraLamp-cloud👾🟡6.9MEDIUMPath Traversal Vulnerability in Dromara Lamp-Cloud Product
CVE-2026-19757DromaraLamp-cloud👾🟡6.9MEDIUMPath Traversal Vulnerability in Dromara Lamp-Cloud Software
CVE-2026-19756DromaraLamp-cloud👾🟡5.3MEDIUMRemote Code Execution Vulnerability in LAMP Rapid Development Platform by Dromara
CVE-2026-69100DromaraLamp-cloud👾🟡8.7HIGHInsufficient Redirect URI Validation in MaxKey OAuth 2.0 Implementation
CVE-2026-67345DromaraMaxkey👾🟡8.5HIGHAuthorization Bypass in RuoYi-Vue-Plus Workflow Management
CVE-2026-58176DromaraRuoyi-vue-plus👾🟡7.1HIGHRemote Code Execution Vulnerability in Dromara Lamp-Cloud
CVE-2026-9498DromaraLamp-cloud👾🟡5.3MEDIUMSQL Injection Vulnerability in Dromara MaxKey Software
CVE-2026-7699DromaraMaxkey👾🟡5.3MEDIUMCode Injection Vulnerability in Dromara Warm-Flow Product
CVE-2026-6125DromaraWarm-flow👾🟡5.3MEDIUMImproper Authorization in Dromara Lamp-Cloud Affects Remote User Management
CVE-2026-5529DromaraLamp-cloud👾🟡5.3MEDIUMRemote Code Injection Vulnerability in Dromara UJCMS Product
CVE-2026-2954DromaraUjcms👾🟡5.3MEDIUMPath Traversal Vulnerability in Dromara UJCMS 101.2
CVE-2026-2953DromaraUjcms👾🟡5.3MEDIUMDeserialization Vulnerability in Dromara Sa-Token by Dromara
CVE-2025-15222DromaraSa-token👾🟡2.3LOW