yeqifu has 3 CVEs on record between 2025 and 2026. The median CVSS is 7.5 (high). The most common weakness class is CWE-22 (3). Most affected products: warehouse_management_system (2), carrental (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- warehouse_management_system 2
- carrental 1
Worst active — by depth score
CVE-2025-65879High· 8.1Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability45CVE-2025-65878High· 7.5The warehouse management system version 1.2 contains an arbitrary file read vulnerability41CVE-2025-15432Medium· 5.3A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b329
yeqifu vulnerabilities
CVEs affecting yeqifu, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2025-15432Medium· 5.3A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3
A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This vulnerability affects the function downloadShowFile of the file /file/downloadShowFile.action of the component com.yeqifu.sys.control…
CVE-2025-65879High· 8.1Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability
Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods endpoint accepts a user-controlled goodsimg parameter, which is directly concatenated with the server's UPLOAD_PATH a…
CVE-2025-65878High· 7.5The warehouse management system version 1.2 contains an arbitrary file read vulnerability
The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint `/file/showImageByPath` does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbi…