orion-visor vulnerabilities

2 known vulnerabilities in orion-visor from Dromara. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  A security vulnerability has been detected in dromara orion-visor up to 2.5.7.

  CVE-2026-90510Sep 13, 2026Dromara

  A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file orion-visor-modules/orion-visor-module-asset/orion-visor-module-asset-service/src/main/java/org/dromara/visor/mod

• 7.3 High severity

  orion-visor: Use of Hard-coded Password

  CVE-2026-90509Sep 13, 2026Dromara

  A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed