Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletFilter of the file /workflow/instance/deleteByInstanceIds of the component Workflow Module. The manipulation leads to missing authorization. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-2819 Remote Authorization Bypass in Dromara RuoYi-Vue-Plus Workflow Module https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2819
Post summary
This brief notice announces a new remote authorization bypass vulnerability (CVE-2026-2819) affecting the Dromara RuoYi‑Vue‑Plus Workflow Module, providing only the identifier and general description.
CVE-2026-2819 A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletFilter of the file /workflow/instance/deleteByIns… https://www.cve.org/CVERecord?id=CVE-2026-2819
Post summary
The content announces a newly identified CVE‑2026‑2819 affecting the SaServletFilter function in Dromara RuoYi‑Vue‑Plus, providing no further details beyond the affected code location.