dromara Exploited Vulnerabilities
Dromara vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
ποΈ Published
- Anytime
Sort By:
ποΈ Published Date
- Descending
Authorization Bypass in RuoYi-Vue-Plus Workflow Management
CVE-2026-58176DromaraRuoyi-vue-plusπΎπ‘7.1HIGHRemote Code Execution Vulnerability in Dromara Lamp-Cloud
CVE-2026-9498DromaraLamp-cloudπΎπ‘5.3MEDIUMSQL Injection Vulnerability in Dromara MaxKey Software
CVE-2026-7699DromaraMaxkeyπΎπ‘5.3MEDIUMCode Injection Vulnerability in Dromara Warm-Flow Product
CVE-2026-6125DromaraWarm-flowπΎπ‘5.3MEDIUMImproper Authorization in Dromara Lamp-Cloud Affects Remote User Management
CVE-2026-5529DromaraLamp-cloudπΎπ‘5.3MEDIUMRemote Code Injection Vulnerability in Dromara UJCMS Product
CVE-2026-2954DromaraUjcmsπΎπ‘5.3MEDIUMPath Traversal Vulnerability in Dromara UJCMS 101.2
CVE-2026-2953DromaraUjcmsπΎπ‘5.3MEDIUMDeserialization Vulnerability in Dromara Sa-Token by Dromara
CVE-2025-15222DromaraSa-tokenπΎπ‘2.3LOWInjection Vulnerability in Dromara DataCompare JDBC URL Handler of Dromara
CVE-2025-13268DromaraDatacompareπΎπ‘5.3MEDIUM