roncoo has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 5.7 (medium).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.7
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-111719Medium· 5.9Roncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query45CVE-2026-111611Medium· 5.4roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders30
roncoo vulnerabilities
CVEs affecting roncoo, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-111611Medium· 5.4roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders
roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to …
▾ Sunlitroncoo · roncoo-educationEPSS 0.22%via NVD
CVE-2026-111719Medium· 5.9PoCRoncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query
Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that allows unauthenticated attackers to retrieve payment records by supplying a trxNo parameter. Attackers can guess transac…
▾ Twilightroncoo · roncoo-payEPSS 0.34%via CVEORG