Eelunez

Products

Exploited and recent CVEs

• CVE-2026-111604 Low 3.8 eladmin through 2.7 Broken Access Control via /api/users Update and Delete 0.4%
• CVE-2026-108706 Medium 4.3 eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint 0.2%
• CVE-2026-108688 Medium 4.3 Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload 0.2%
• CVE-2026-77036 Medium 6.3 elunez eladmin GenConfigController improper authorization 0.4%
• CVE-2026-10550 Medium 6.3 elunez eladmin Application Deployment App.java command injection 1.2%
• CVE-2025-10084 Medium 4.3 elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization 0.3%
• CVE-2025-10014 Low 3.1 elunez eladmin Email Address updateEmail updateUserEmail improper authorization 0.3%
• CVE-2025-9937 Medium 5.4 elunez eladmin LocalStorageController deleteFile improper authorization 0.4%
• CVE-2025-9241 Medium 6.3 elunez eladmin exportUser csv injection 0.3%
• CVE-2025-9240 Medium 4.3 elunez eladmin info information disclosure 0.3%
• CVE-2025-9239 Low 3.7 elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption 0.2%
• CVE-2025-8530 Medium 5.3 elunez eladmin Druid application-prod.yml default credentials 0.6%
• CVE-2025-3250 Medium 4.3 elunez eladmin Maintenance Management Module testConnect deserialization 0.5%
• CVE-2025-2855 Medium 4.7 elunez eladmin upload checkFile deserialization 0.6%
• CVE-2024-7458 Medium 5.5 elunez eladmin Database Management/Deployment Management upload path traversal 0.8%