CVE-2025-28410

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting user has administrative privileges...

CVE-2025-28401

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter...

CVE-2022-39997

CVE-2022-39997 affects Teldat RS123/RS123w routers through a weak password requirement that enables a remote attacker to escalate privileges. The Red Hat, NVD, CVE listings, and third-party sources consistently describe a credential-policy weakness in the router’s authentication flow that can lea...