# cve.now: Dromara

The newest entries naming Dromara as an affected vendor (up to 200), of 62 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-121552](https://cve.now/CVE-2026-121552.md): domain-admin before 1.6.79 Missing Authorization via getGroupUserList (CVSS 5.3)
- [CVE-2026-120461](https://cve.now/CVE-2026-120461.md): Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh\_command/batch (CVSS 8.7)
- [CVE-2026-120460](https://cve.now/CVE-2026-120460.md): Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllers (CVSS 8.7)
- [CVE-2026-120201](https://cve.now/CVE-2026-120201.md): Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header (CVSS 9.3)
- [CVE-2026-119647](https://cve.now/CVE-2026-119647.md): RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId} (CVSS 5.3)
- [CVE-2026-111605](https://cve.now/CVE-2026-111605.md): Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController (CVSS 8.6)
- [CVE-2026-110609](https://cve.now/CVE-2026-110609.md): Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter (CVSS 7.1)
- [CVE-2026-110107](https://cve.now/CVE-2026-110107.md): RuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId} (CVSS 2.3)
- [CVE-2026-110106](https://cve.now/CVE-2026-110106.md): RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId} (CVSS 2.3)
- [CVE-2026-109168](https://cve.now/CVE-2026-109168.md): lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId (CVSS 7.1)
- [CVE-2026-109166](https://cve.now/CVE-2026-109166.md): lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById (CVSS 7.1)
- [CVE-2026-107781](https://cve.now/CVE-2026-107781.md): Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById (CVSS 9.1)
- [CVE-2026-107780](https://cve.now/CVE-2026-107780.md): Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter (CVSS 9.3)
- [CVE-2026-107779](https://cve.now/CVE-2026-107779.md): Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE (CVSS 9.3)
- [CVE-2026-94536](https://cve.now/CVE-2026-94536.md): lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource (CVSS 4.3)
- [CVE-2026-94535](https://cve.now/CVE-2026-94535.md): lamp-cloud through 5.10.0 Unauthorized Notification Deletion (CVSS 7.1)
- [CVE-2026-94534](https://cve.now/CVE-2026-94534.md): lamp-cloud through 5.10.0 Unauthorized Profile Modification via PUT endpoints (CVSS 7.1)
- [CVE-2026-94533](https://cve.now/CVE-2026-94533.md): lamp-cloud through 5.10.0 Unauthorized File Download via /anyone/file (CVSS 6.5)
- [CVE-2026-94532](https://cve.now/CVE-2026-94532.md): lamp-cloud through 5.10.0 Unauthorized User Profile Access via getUserInfoById (CVSS 6.5)
- [CVE-2026-93961](https://cve.now/CVE-2026-93961.md): Dromara UJCMS UserController UserController.java usernameExist improper authorization (CVSS 6.9)
- [CVE-2026-92993](https://cve.now/CVE-2026-92993.md): Dromara mayfly-go Machine Script Feature machine\_script.go RunMachineScript os command injection (CVSS 5.3)
- [CVE-2026-92992](https://cve.now/CVE-2026-92992.md): Dromara mayfly-go AI Assistant ai.go authorization (CVSS 5.3)
- [CVE-2026-91996](https://cve.now/CVE-2026-91996.md): lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint (CVSS 8.7)
- [CVE-2026-91993](https://cve.now/CVE-2026-91993.md): Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list (CVSS 5.3)
- [CVE-2026-90510](https://cve.now/CVE-2026-90510.md): dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key (CVSS 6.9)
- [CVE-2026-90509](https://cve.now/CVE-2026-90509.md): dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials (CVSS 6.9)
- [CVE-2026-78140](https://cve.now/CVE-2026-78140.md): Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine (CVSS 5.1)
- [CVE-2026-77795](https://cve.now/CVE-2026-77795.md): Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization (CVSS 5.3)
- [CVE-2026-19758](https://cve.now/CVE-2026-19758.md): dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal (CVSS 6.9)
- [CVE-2026-19757](https://cve.now/CVE-2026-19757.md): Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal (CVSS 6.9)
- [CVE-2026-19756](https://cve.now/CVE-2026-19756.md): Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal (CVSS 5.3)
- [CVE-2026-69102](https://cve.now/CVE-2026-69102.md): MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust (CVSS 9.3)
- [CVE-2026-69100](https://cve.now/CVE-2026-69100.md): LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution (CVSS 8.7)
- [CVE-2026-67345](https://cve.now/CVE-2026-67345.md): MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft (CVSS 8.5)
- [CVE-2026-58176](https://cve.now/CVE-2026-58176.md): RuoYi-Vue-Plus - Missing Authorization on Workflow Task Management Endpoints (CVSS 6.5)
- [CVE-2026-9498](https://cve.now/CVE-2026-9498.md): Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine (CVSS 5.3)
- [CVE-2026-7699](https://cve.now/CVE-2026-7699.md): Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection (CVSS 5.3)
- [CVE-2026-6125](https://cve.now/CVE-2026-6125.md): Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection (CVSS 5.3)
- [CVE-2026-5529](https://cve.now/CVE-2026-5529.md): Dromara lamp-cloud DefUserController pageUser improper authorization (CVSS 5.3)
- [CVE-2026-2954](https://cve.now/CVE-2026-2954.md): Dromara UJCMS ImportDataController import-channel importChanel injection (CVSS 5.3)
- [CVE-2026-2953](https://cve.now/CVE-2026-2953.md): Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal (CVSS 5.3)
- [CVE-2026-2819](https://cve.now/CVE-2026-2819.md): Dromara RuoYi-Vue-Plus Workflow deleteByInstanceIds SaServletFilter authorization (CVSS 5.3)
- [CVE-2025-15222](https://cve.now/CVE-2025-15222.md): Dromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserialization (CVSS 2.3)
- [CVE-2025-15117](https://cve.now/CVE-2025-15117.md): Dromara Sa-Token SaJdkSerializer.java ObjectInputStream.readObject deserialization (CVSS 2.3)
- [CVE-2025-13268](https://cve.now/CVE-2025-13268.md): Dromara dataCompare JDBC URL DbconfigServiceImpl.java DbConfig injection (CVSS 5.3)
- [CVE-2025-7552](https://cve.now/CVE-2025-7552.md): Dromara Northstar Path AuthorizationInterceptor.java preHandle access control (CVSS 5.3)
- [CVE-2025-6925](https://cve.now/CVE-2025-6925.md): Dromara RuoYi-Vue-Plus Mail MailController.java path traversal (CVSS 6.9)
- [CVE-2025-6517](https://cve.now/CVE-2025-6517.md): Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery (CVSS 5.3)
- [CVE-2025-2491](https://cve.now/CVE-2025-2491.md): Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting (CVSS 4.8)
- [CVE-2025-2490](https://cve.now/CVE-2025-2490.md): Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting (CVSS 4.8)
- [CVE-2024-12483](https://cve.now/CVE-2024-12483.md): Dromara UJCMS User ID id authorization (CVSS 6.3)
- [CVE-2024-3928](https://cve.now/CVE-2024-3928.md): Dromara open-capacity-platform auth-server heapdump information disclosure (CVSS 4.3)
- [CVE-2023-51389](https://cve.now/CVE-2023-51389.md): HertzBeat SnakeYAML Deser RCE (CVSS 9.8)
- [CVE-2023-51388](https://cve.now/CVE-2023-51388.md): HertzBeat AviatorScript Inject RCE (CVSS 9.8)
- [CVE-2023-51653](https://cve.now/CVE-2023-51653.md): Hertzbeat JMX JNDI RCE (CVSS 9.8)
- [CVE-2023-51650](https://cve.now/CVE-2023-51650.md): Unauthorized access vulnerability on three interfaces (CVSS 7.5)
- [CVE-2023-51387](https://cve.now/CVE-2023-51387.md): Expression Injection Vulnerability in Hertzbeat (CVSS 7.2)
- [CVE-2022-39337](https://cve.now/CVE-2022-39337.md): Permission bypass due to incorrect configuration in github.com/dromara/hertzbeat (CVSS 7.5)
- [CVE-2023-3276](https://cve.now/CVE-2023-3276.md): Dromara HuTool XML Parsing Module XmlUtil.java readBySax xml external entity reference (CVSS 5.5)
- [CVE-2023-2476](https://cve.now/CVE-2023-2476.md): Dromara J2eeFAST Announcement cross site scripting (CVSS 3.5)
- [CVE-2023-2475](https://cve.now/CVE-2023-2475.md): Dromara J2eeFAST System Message cross site scripting (CVSS 3.5)
- [CVE-2022-4565](https://cve.now/CVE-2022-4565.md): Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumption (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/dromara
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.