[ Vendor · 4 CVEs ]
yzcheng90
CVEs affecting yzcheng90 published in the last 30 days, plus any yzcheng90 CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97060 | 25 Sep 2026 | CVSS 7.2 | yzcheng90 X-SpringBootX-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to modify or delete users without… | |
| CVE-2026-97063 | 25 Sep 2026 | CVSS 9.1 | yzcheng90 X-SpringBootX-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobile/code and GET… | |
| CVE-2026-97064 | 25 Sep 2026 | CVSS 9.1 | yzcheng90 X-SpringBootX-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 enabled by default in the database seed. Unauthenticated… | |
| CVE-2026-100192 | 25 Sep 2026 | CVSS 6.5 | yzcheng90 X-SpringBootX-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field… |