« Back to list

Dromara

Dromara Ruoyi-cloud-plus: vulnerabilities and CVEs

Dromara Ruoyi-cloud-plus has 1 published vulnerabilities, 1 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs1
Last 12 months1
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-110107Low (2.3)0.27%—Oct 13, 2026
RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying their socialId. Attackers can send…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1210 Exploitation of Remote Services1
  2. T1531 Account Access Removal1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Dromara