Dromara Orion Visor
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Dromara Orion Visor.
By the Year
In 2026 there have been 2 vulnerabilities in Dromara Orion Visor with an average score of 6.9 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 6.90 |
It may take a day or so for new Orion Visor vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Dromara Orion Visor Security Vulnerabilities
Hardcoded Key in dromara orionvisor 2.5.7 HostKeyServiceImpl Remote Exploit
CVE-2026-90510
6.9 - Medium
- September 13, 2026
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file orion-visor-modules/orion-visor-module-asset/orion-visor-module-asset-service/src/main/java/org/dromara/visor/module/asset/service/impl/HostKeyServiceImpl.java. The manipulation leads to use of hard-coded cryptographic key . The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Use of Hard-coded Cryptographic Key
Dromara Orion-Visor <=2.5.7 Hard-Coded Credentials via ExposeApiAspect
CVE-2026-90509
6.9 - Medium
- September 13, 2026
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Use of Hard-coded Credentials
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Dromara Orion Visor or by Dromara? Click the Watch button to subscribe.
