dromara lamp-cloud vulnerabilities

Newest CVEs

• CVE-2026-109168

  lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId

  dromara · lamp-cloud

  High7.1
• CVE-2026-109166

  lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById

  dromara · lamp-cloud

  High7.1
• CVE-2026-94536

  lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource

  dromara · lamp-cloud

  Medium5.3
• CVE-2026-94535

  lamp-cloud through 5.10.0 Unauthorized Notification Deletion

  dromara · lamp-cloud

  High7.1
• CVE-2026-94534

  lamp-cloud through 5.10.0 Unauthorized Profile Modification via PUT endpoints

  dromara · lamp-cloud

  High7.1
• CVE-2026-94533

  lamp-cloud through 5.10.0 Unauthorized File Download via /anyone/file

  dromara · lamp-cloud

  High7.1
• CVE-2026-94532

  lamp-cloud through 5.10.0 Unauthorized User Profile Access via getUserInfoById

  dromara · lamp-cloud

  High7.1
• CVE-2026-91996

  lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint

  dromara · lamp-cloud

  High8.7
• CVE-2026-19758

  dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal

  dromara · lamp-cloud

  Medium6.9
• CVE-2026-19757

  Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal

  Dromara · lamp-cloud

  Medium6.9