lenve
- Total products in the ecosystem
- 2
- Total vulnerabilities (90 days)
- 3
en
Verify to analyze this security profile
As of 09/13/2026, lenve recorded 3 security vulnerabilities in the last 90 days across 1 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, vhr had the most security vulnerabilities in the lenve ecosystem, with 3 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-90490lenve vhr MailReceiver deserialization | Exploitation statusPublic exploit | FixNot confirmed | Affected productvhr | Published09/13/2026 | SeverityMedium |
CVE-2026-85214vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite | Exploitation statusPublic exploit | FixYes | Affected productvhr | Published09/03/2026 | SeverityHigh |
CVE-2026-85182vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change | Exploitation statusPublic exploit | FixYes | Affected productvhr | Published09/03/2026 | SeverityHigh |
CVE-2025-3398lenve VBlog WebSecurityConfig.java configure access control | Exploitation statusPublic exploit | FixNot confirmed | Affected productVBlog | Published04/08/2025 | SeverityMedium |
CVE-2025-2364lenve VBlog ArticleService.java addNewArticle cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productVBlog | Published03/17/2025 | SeverityMedium |
CVE-2025-2363lenve VBlog ArticleController.java uploadImg path traversal | Exploitation statusPublic exploit | FixNot confirmed | Affected productVBlog | Published03/17/2025 | SeverityMedium |