roncoo vulnerabilities

Products

• roncoo/roncoo-pay 4
• roncoo/roncoo-education 2

Latest roncoo CVEs

Newest publication first

1. CVE-2026-111719 Roncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query

   Published 2026-10-16

   High·CVSS 8.2 EPSS 0.34%

   Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that allows unauthenticated attackers to retrieve payment records by supplying a trxNo parameter. Attackers can guess transaction numbers, a '7' prefix plus a snowflake...

2. CVE-2026-111611 roncoo-education through 25.0.0-RELEASE IDOR via Order Pay Cancel and Continue Endpoints

   Published 2026-10-16

   Medium·CVSS 5.3 EPSS 0.22%

   roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to the pay cancel or continue endpoints to clo...

3. CVE-2025-10992 roncoo roncoo-pay lookupList improper authorization

   Published 2025-09-26

   Medium·CVSS 6.9 EPSS 0.37%

   A vulnerability was determined in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. Affected is an unknown function of the file /user/info/lookupList. Executing manipulation can lead to improper authorization. The attack may be performed from remote. The exploit h...

4. CVE-2025-10288 roncoo roncoo-pay list improper authentication

   Published 2025-09-12

   Medium·CVSS 6.9 EPSS 0.46%

   A vulnerability was found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The impacted element is an unknown function of the file /user/info/list. Performing manipulation results in improper authentication. It is possible to initiate the attack remotely. The...

5. CVE-2025-10287 roncoo roncoo-pay orderQuery direct request

   Published 2025-09-12

   Low·CVSS 2.3 EPSS 0.26%

   A vulnerability has been found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The affected element is an unknown function of the file /auth/orderQuery. Such manipulation of the argument orderNo leads to direct request. The attack may be performed from remote...

6. CVE-2022-29632 An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file.

   Published 2022-05-26

   Critical·CVSS 9.8 EPSS 17.5%

   An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.