51mis has a focused vulnerability footprint centered on its Lingdang CRM product. Its disclosures skew strongly toward critical-severity outcomes and recur through application-layer weaknesses including injection flaws, SQL injection, improper access control, path traversal, and unrestricted file upload—patterns typical of web-facing business applications with substantial internal data exposure. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by 51mis over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-9140HIGH A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this issue is some unknown functionality of the file /crm/crmapi/ | Aug 19, 2025 | 8.8 | 38 | NO | YES |
CVE-2025-8908CRITICAL A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of the file crm/WeiXinAp | Aug 13, 2025 | 9.8 | 34 | NO | NO |
CVE-2025-8345CRITICAL A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vulnerability is the function delete_user | Jul 31, 2025 | 9.8 | 34 | NO | NO |
CVE-2024-11122CRITICAL A vulnerability, which was classified as critical, has been found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. Affected by this issue is some unknown functionality of the file /crm/ | Nov 12, 2024 | 9.8 | 29 | NO | NO |
CVE-2025-8219CRITICAL A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. It has been rated as critical. This issue affects some unknown processing of the f | Jul 27, 2025 | 9.8 | 27 | NO | NO |
CVE-2025-0463CRITICAL A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown function of the file /c | Jan 14, 2025 | 9.8 | 25 | NO | NO |
CVE-2025-0462CRITICAL A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as critical. This issue affects some unknown processing of the file | Jan 14, 2025 | 9.8 | 25 | NO | NO |
CVE-2024-11121CRITICAL A vulnerability classified as critical was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. Affected by this vulnerability is an unknown functionality of the file /crm/WeiXinApp/m | Nov 12, 2024 | 9.8 | 25 | NO | NO |
CVE-2025-5005HIGH A vulnerability was detected in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. This affects an unknown function of the file crm/WeiXinApp/dingtalk/index_event | Sep 9, 2025 | 7.3 | 23 | NO | NO |
CVE-2025-0461HIGH A vulnerability has been found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as problematic. This vulnerability affects unknown code of the | Jan 14, 2025 | 7.5 | 21 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by 51mis.
Media articles that mention a CVE ID that affects a product developed by 51mis — matched by CVE ID, not by vendor name.