CVE-2025-70986

7.5 highEPSS 0.4%

High (7.5) in ruoyi ruoyi. EPSS 0.4% chance of exploitation in the next 30 days.

Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department data.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWEs: CWE-284, CWE-862
Published: 2026-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19