2026-05-25 · 2 min · BitNinja Team

Unrestricted File Upload Vulnerability in RuoYi-Vue

A newly discovered vulnerability, CVE-2026-9374, affects the yangzongzhuan RuoYi-Vue framework. This flaw enables unrestricted file uploads, potentially allowing attackers to compromise server security. The vulnerability impacts versions up to 3.9.2. It exploits the FileUpload...