feelec-yishu has 7 CVEs on record. Disclosure cadence is accelerating: 7 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 7. The median CVSS is 6.3 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-79 (3) and CWE-94 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 7 prev 0
Worst active — by depth score
CVE-2026-105290High· 7.3A vulnerability was determined in feelec-yishu feelcrm-os 1.0.052CVE-2026-105389Medium· 6.3A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.047CVE-2026-105388Medium· 6.3A weakness has been identified in feelec-yishu feelcrm-os 1.0.047CVE-2026-105287Medium· 6.3A flaw has been found in feelec-yishu feelcrm-os 1.0.047CVE-2026-105291Medium· 4.3A vulnerability was identified in feelec-yishu feelcrm-os 1.0.036
feelec-yishu vulnerabilities
CVEs affecting feelec-yishu, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-105389Medium· 6.3PoCA security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0
A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadController.class.php of the component UploadTicketFile Endpoint. Such ma…
CVE-2026-105388Medium· 6.3PoCA weakness has been identified in feelec-yishu feelcrm-os 1.0.0
A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php of the component Member Endpoint. This manipulation of the…
CVE-2026-105291Medium· 4.3PoCA vulnerability was identified in feelec-yishu feelcrm-os 1.0.0
A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoin…
CVE-2026-105290High· 7.3PoCA vulnerability was determined in feelec-yishu feelcrm-os 1.0.0
A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argu…
CVE-2026-105289Low· 3.5PoCA vulnerability was found in feelec-yishu feelcrm-os 1.0.0
A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_decode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Perfo…
CVE-2026-105288Medium· 4.3PoCA vulnerability has been found in feelec-yishu feelcrm-os 1.0.0
A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the …
CVE-2026-105287Medium· 6.3PoCA flaw has been found in feelec-yishu feelcrm-os 1.0.0
A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument…