CVE-2026-122016

The yangzongzhuan RuoYi-Vue framework (up to version 3.9.2 ) contains a vulnerability in the Permission Service component. Specifically, the getMenuPermission function in SysPermissionService.java is susceptible to improper privilege management due to the manipulation of the perms argument. This ...

PT-2026-137194

Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi-Vue versions prior to 3.9.3 Description Improper privilege management occurs within the Permission Service component. A remote attacker can manipulate the perms argument in the getMenuPermission function of the...