CVE-2026-116006 | YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09 SMS Code Verification AuthController.java mobile/code improper authentication

October 24, 2026 Yanac

A vulnerability described as critical has been identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SMS Code Verification. The manipulation of the argument mobile/code results in improper authentication.

This vulnerability is reported as CVE-2026-116006. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More