[ Vendor · 5 CVEs ]
risesoft-y9
CVEs affecting risesoft-y9 published in the last 30 days, plus any risesoft-y9 CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111651 | 16 Oct 2026 | CVSS 6.5 | risesoft-y9 Digital-InfrastructureRisesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module DownloadController that allows… | |
| CVE-2026-110118 | 13 Oct 2026 | CVSS 6.5 | risesoft-y9 WorkFlow-EngineWorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users'… | |
| CVE-2026-110115 | 13 Oct 2026 | CVSS 7.5 | risesoft-y9 Digital-InfrastructureRisesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream… | |
| CVE-2026-110116 | 13 Oct 2026 | CVSS 9.1 | risesoft-y9 Digital-InfrastructureRisesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows… | |
| CVE-2026-102616 | 29 Sep 2026 | CVSS 7.3 | risesoft-y9 WorkFlow-EngineA vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10. Impacted is the function getByIdAndYear of the file… |