CVE-2026-5147Published
YunaiV yudao-cloud get-by-website sql injection
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-5147 · Microsoft / collected KEV context
cve-program · CVE-2026-5147
- https://vuldb.com/vuln/354181
- https://vuldb.com/vuln/354181/cti
- https://vuldb.com/cve/CVE-2026-5147
- https://vuldb.com/submit/780191
- https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/yudaoCloudv2026.01.md
- https://github.com/NarcherAlter/Security_Note/blob/main/Vulnerability_Discovery/yudaoCloudv2026.01.md#admin-apisystemtenantget-by-website
- https://gitee.com/zhijiantianya/yudao-cloud/commit/bccf7c79e5f93f027a021172a18e8876cc6c1062
Related operational evidence
Explicit CVE identifiers- YunaiV yudao-cloud get-by-website sql injection · Affected-version evidence changed · 26 Oct 2026