CVE-2026-7710

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file JwtAuthenticationTokenFilter.java of the component Ruoyi-Vue-Pro. Performing a manipulation of the argument mock-token results in improper authentication. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: May 4, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-771008.7MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance CVE-2026-771017.5CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance r CVE-2026-771027.5CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance re CVE-2026-771037.5CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to CVE-2026-771047.5CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Upd CVE-2026-771058.8CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved main CVE-2026-771068.8Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintena CVE-2026-771087.5Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage CVE-2026-771098.6Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage CVE-2026-77117.3A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byom_handler CVE-2026-771107.6Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could res CVE-2026-771118.7Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high