orion-visor vulnerabilities
CVEs whose affected-version data names the orion-visor package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-90509High· 7.3PoCA weakness has been identified in dromara orion-visor up to 2.5.7
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The …
▾ Midnightdromara · orion-visorEPSS 0.29%via NVD
CVE-2026-90510High· 8.3PoCA security vulnerability has been detected in dromara orion-visor up to 2.5.7
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file orion-visor-modules/orion-visor-module-asset/orion-visor-module-asset-service/src/main/jav…
▾ Midnightdromara · orion-visorEPSS 0.29%via NVD