TDuckCloud vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20253
3. 202611

Newest CVEs

• CVE-2026-111621

  TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key}

  TDuckCloud · tduck-survey-form

  Medium5.3
• CVE-2026-109167

  TDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/save

  TDuckCloud · tduck-survey-form

  Medium5.3
• CVE-2026-109165

  TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create

  TDuckCloud · tduck-survey-form

  Medium5.3
• CVE-2026-109164

  TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey}

  TDuckCloud · tduck-survey-form

  High7.1
• CVE-2026-100306

  TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement

  TDuckCloud · tduck-survey-form

  Medium6.9
• CVE-2026-100305

  TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint

  TDuckCloud · tduck-survey-form

  Medium5.3
• CVE-2026-100304

  TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check

  TDuckCloud · tduck-survey-form

  Medium6.0
• CVE-2026-100303

  TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints

  TDuckCloud · tduck-survey-form

  Medium5.3
• CVE-2026-95829

  TDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injection

  TDuckCloud · tduck-platform

  Medium5.3
• CVE-2026-92602

  TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL

  TDuckCloud · tduck-survey-form

  High7.1