domain-admin vulnerabilities

CVEs whose affected-version data names the domain-admin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121552Medium· 4.3PoC

3d ago

domain-admin before 1.6.79 Missing Authorization via getGroupUserList

Dromara domain-admin before 1.6.79 contains a missing authorization vulnerability in the POST /api/getGroupUserList handler that allows authenticated users to read other groups' members. Attackers can enumerate sequential group_id values…

▾ Twilightdromara · domain-adminEPSS 0.36%via CVEORG