[ Vendor · 3 CVEs ]
youlaitech
CVEs affecting youlaitech published in the last 30 days, plus any youlaitech CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110613 | 14 Oct 2026 | CVSS 6.5 | youlaitech youlai-mallyoulai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders… | |
| CVE-2026-110215 | 13 Oct 2026 | CVSS 8.8 | youlaitech youlai-bootyoulai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbitrary menu and button… | |
| CVE-2026-110216 | 13 Oct 2026 | CVSS 7.1 | youlaitech youlai-bootyoulai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or disable accounts because… |