CVE-2026-122016

The yangzongzhuan RuoYi-Vue framework (up to version 3.9.2 ) contains a vulnerability in the Permission Service component. Specifically, the getMenuPermission function in SysPermissionService.java is susceptible to improper privilege management due to the manipulation of the perms argument. This ...