CVE-2025-70985
Critical · 9.1CVSS
9.1
EPSS
0.4%
Published
Jan 23, 2026
CISA due date
—
The record
Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|