feelec-yishu has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was October 2026 with 5. The median CVSS is 4.3 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-79 (3) and CWE-94 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.3
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Worst active — by depth score
CVE-2026-105287Medium· 6.3A flaw has been found in feelec-yishu feelcrm-os 1.0.047CVE-2026-105290High· 7.3A vulnerability was determined in feelec-yishu feelcrm-os 1.0.040CVE-2026-105291Medium· 4.3A vulnerability was identified in feelec-yishu feelcrm-os 1.0.036CVE-2026-105288Medium· 4.3A vulnerability has been found in feelec-yishu feelcrm-os 1.0.024CVE-2026-105289Low· 3.5A vulnerability was found in feelec-yishu feelcrm-os 1.0.019
feelec-yishu vulnerabilities
CVEs affecting feelec-yishu, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-105291Medium· 4.3PoCA vulnerability was identified in feelec-yishu feelcrm-os 1.0.0
A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoin…
CVE-2026-105290High· 7.3A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0
A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argu…
CVE-2026-105289Low· 3.5A vulnerability was found in feelec-yishu feelcrm-os 1.0.0
A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_decode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Perfo…
CVE-2026-105288Medium· 4.3A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0
A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the …
CVE-2026-105287Medium· 6.3PoCA flaw has been found in feelec-yishu feelcrm-os 1.0.0
A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument…