CVE-2025-70985

9.1 criticalEPSS 0.4%

Critical (9.1) in ruoyi ruoyi. EPSS 0.4% chance of exploitation in the next 30 days.

Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope.

Severity

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWEs: CWE-284, CWE-862
Published: 2026-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19