lamp-cloud
- Software type
- Application framework
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/24/2026, lamp-cloud recorded 12 security vulnerabilities in the last 90 days, of which 8 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of lamp-cloud and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-109168lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizIdCVE-2026-109166lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlByIdCVE-2026-94536lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resourceCVE-2026-94535lamp-cloud through 5.10.0 Unauthorized Notification DeletionCVE-2026-94534lamp-cloud through 5.10.0 Unauthorized Profile Modification via PUT endpoints| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-109168lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId | Exploitation statusActively exploited | FixYes |
| SeverityHigh |
CVE-2026-109166lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById | Exploitation statusActively exploited | FixYes | Published10/12/2026 | SeverityHigh |
|---|
CVE-2026-94536lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource | Exploitation statusActively exploited | FixYes | Published09/21/2026 | SeverityMedium |
|---|
CVE-2026-94535lamp-cloud through 5.10.0 Unauthorized Notification Deletion | Exploitation statusActively exploited | FixYes | Published09/21/2026 | SeverityHigh |
|---|
CVE-2026-94534lamp-cloud through 5.10.0 Unauthorized Profile Modification via PUT endpoints | Exploitation statusActively exploited | FixYes | Published09/21/2026 | SeverityHigh |
|---|
CVE-2026-94533lamp-cloud through 5.10.0 Unauthorized File Download via /anyone/file | Exploitation statusActively exploited | FixYes | Published09/21/2026 | SeverityHigh |
|---|
CVE-2026-94532lamp-cloud through 5.10.0 Unauthorized User Profile Access via getUserInfoById | Exploitation statusActively exploited | FixYes | Published09/21/2026 | SeverityHigh |
|---|
CVE-2026-91996lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint | Exploitation statusActively exploited | FixYes | Published09/15/2026 | SeverityHigh |
|---|
CVE-2026-19758dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal | Exploitation statusActively exploited | FixNo | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-19757Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal | Exploitation statusActively exploited | FixNo | Published08/13/2026 | SeverityMedium |
|---|
14 Results | Page 1 of 2