https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-10987.htmlhttps://patchthecve.com/cve/CVE-2025-10987.htmlTue, 27 Oct 2026 08:16:51 +0000MEDIUM 6.3: A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of the file /crm/contact/transfer of the component HTTP Request Handler. This manipulation of the argument contactId causes improper authorization. It is possible to initiate the https://patchthecve.com/cve/CVE-2025-10277.htmlhttps://patchthecve.com/cve/CVE-2025-10277.htmlTue, 27 Oct 2026 08:16:51 +0000MEDIUM 6.3: A vulnerability was detected in YunaiV yudao-cloud up to 2025.09. This issue affects some unknown processing of the file /crm/receivable/submit. The manipulation of the argument ID results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used. The https://patchthecve.com/cve/CVE-2025-10275.htmlhttps://patchthecve.com/cve/CVE-2025-10275.htmlTue, 27 Oct 2026 08:16:51 +0000MEDIUM 6.3: A weakness has been identified in YunaiV yudao-cloud up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Executing a manipulation of the argument ids/newOwnerUserId can lead to improper authorization. The attack may be launched remotely. The exploit has been made availabl