Yyoulaitech

Products

Exploited and recent CVEs

• CVE-2026-110613 Medium 6.5 youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List 0.4%
• CVE-2026-110216 High 7.1 youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint 0.4%
• CVE-2026-110215 High 8.8 youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation 0.5%
• CVE-2026-7672 Medium 6.3 youlaitech youlai-boot Users Endpoint UserController.java getUserList sql injection 0.2%
• CVE-2026-3287 Medium 6.3 youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection 0.4%
• CVE-2025-15372 Low 2.4 youlaitech vue3-element-admin Notice index.vue cross site scripting 0.3%
• CVE-2025-15087 Medium 4.3 youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization 0.3%
• CVE-2025-15086 Medium 4.3 youlaitech youlai-mall MemberController.java getMemberByMobile access control 0.3%
• CVE-2025-15085 Medium 4.3 youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization 0.3%
• CVE-2025-15084 Low 3.1 youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control 0.3%
• CVE-2025-14086 Medium 6.3 youlaitech youlai-mall openid access control 0.3%
• CVE-2025-14085 Medium 6.3 youlaitech youlai-mall orders improper control of dynamically-identified variables 0.4%
• CVE-2025-14052 Medium 6.3 youlaitech youlai-mall members getMemberById access control 0.3%
• CVE-2025-14051 Medium 6.3 youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables 0.5%