CVE-2025-66744

CVSS 7.5 HIGHEPSS 1.4%CWE-22

Vexday Risk Score

36Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 7.5EPSS 1.4%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

09 Jan 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

n/a · n/a

References

https://github.com/iSee857/YonYouBip-path-travel