| CVE-2026-109168 |
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users…
|
7.1
High
|
Oct 12, 2026 |
| CVE-2026-109166 |
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users…
|
7.1
High
|
Oct 12, 2026 |
| CVE-2026-94536 |
lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint,…
|
4.3
Medium
|
Sep 21, 2026 |
| CVE-2026-94535 |
lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the deleteMyNotice endpoint that allows…
|
7.1
High
|
Sep 21, 2026 |
| CVE-2026-94534 |
lamp-cloud through 5.10.0 fails to validate user identity in PUT /anyone/baseInfo and PUT /anyone/avatar endpoints,…
|
7.1
High
|
Sep 21, 2026 |
| CVE-2026-94533 |
lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in FileAnyoneController that allows…
|
6.5
Medium
|
Sep 21, 2026 |
| CVE-2026-94532 |
lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows…
|
6.5
Medium
|
Sep 21, 2026 |
| CVE-2026-91996 |
lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, allowing unauthenticated…
|
8.7
High
|
Sep 15, 2026 |
| CVE-2026-19758 |
A vulnerability was determined in dromara lamp-cloud up to 5.10.0
|
6.9
Medium
|
Aug 13, 2026 |
| CVE-2026-19757 |
A vulnerability was found in Dromara lamp-cloud up to 5.10.0
|
6.9
Medium
|
Aug 13, 2026 |
| CVE-2026-19756 |
A vulnerability has been found in Dromara lamp-cloud up to 5.10.0
|
5.3
Medium
|
Aug 13, 2026 |
| CVE-2026-69100 |
LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability…
|
8.7
High
|
Aug 4, 2026 |
| CVE-2026-9498 |
A vulnerability has been found in Dromara lamp-cloud up to 5.6.2
|
5.3
Medium
|
May 25, 2026 |
| CVE-2026-5529 |
A vulnerability was detected in Dromara lamp-cloud up to 5.8.1
|
5.3
Medium
|
Apr 5, 2026 |