CVE-2025-70986

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Jan 23, 2026

CISA due date

—

The record

Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department data.

Ecosystem	Package	Introduced	Fixed