Elunez Eladmin vulnerabilities

• elunez eladmin eladmin through 2.7 Broken Access Control via /api/users Update and Delete CVE-2026-111604 5.1 MediumOctober 16, 2026
• elunez eladmin eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint CVE-2026-108706 5.3 MediumOctober 11, 2026
• elunez eladmin Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload CVE-2026-108688 5.3 MediumOctober 11, 2026
• elunez eladmin elunez eladmin GenConfigController improper authorization CVE-2026-77036 5.3 MediumAugust 20, 2026
• elunez eladmin elunez eladmin Application Deployment App.java command injection CVE-2026-10550 5.3 MediumJune 2, 2026
• elunez eladmin eladmin Users API Endpoint UserController.java checkLevel access control CVE-2026-8127 5.3 MediumMay 8, 2026
• eladmin elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization CVE-2025-10084 5.3 MediumSeptember 8, 2025
• eladmin elunez eladmin Email Address updateEmail updateUserEmail improper authorization CVE-2025-10014 2.3 LowSeptember 5, 2025
• elunez eladmin elunez eladmin LocalStorageController deleteFile improper authorization CVE-2025-9937 5.3 MediumSeptember 3, 2025
• eladmin elunez eladmin exportUser csv injection CVE-2025-9241 5.3 MediumAugust 20, 2025
• eladmin elunez eladmin info information disclosure CVE-2025-9240 5.3 MediumAugust 20, 2025
• eladmin elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption CVE-2025-9239 6.3 MediumAugust 20, 2025
• eladmin elunez eladmin Druid application-prod.yml default credentials CVE-2025-8530 6.9 MediumAugust 4, 2025
• eladmin elunez eladmin Maintenance Management Module testConnect deserialization CVE-2025-3250 5.3 MediumApril 4, 2025
• eladmin elunez eladmin upload checkFile deserialization CVE-2025-2855 5.1 MediumMarch 27, 2025
• eladmin elunez eladmin Database Management/Deployment Management upload path traversal CVE-2024-7458 5.1 MediumAugust 4, 2024