[ Vendor · 101 CVEs ]
jeecgboot
CVEs affecting jeecgboot published in the last 30 days, plus any jeecgboot CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112017 | 18 Oct 2026 | CVSS 6.5 | JeecgBootJeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist… | |
| CVE-2026-108888 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler that allows any authenticated… | |
| CVE-2026-108891 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any… | |
| CVE-2026-108880 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint that allows any authenticated… | |
| CVE-2026-108881 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any authenticated user to read… | |
| CVE-2026-108882 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition handler that allows any… | |
| CVE-2026-108883 | 11 Oct 2026 | CVSS 6.5 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify… | |
| CVE-2026-108884 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any… | |
| CVE-2026-108885 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged… | |
| CVE-2026-108886 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername handler that allows any… | |
| CVE-2026-108887 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler that allows any authenticated… | |
| CVE-2026-108873 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by… | |
| CVE-2026-108874 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or remove department heads by… | |
| CVE-2026-108875 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler that allows any authenticated… | |
| CVE-2026-108876 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated… | |
| CVE-2026-108877 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authenticated user to delete AI… | |
| CVE-2026-108878 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged… | |
| CVE-2026-108879 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows authenticated users to read… | |
| CVE-2026-108866 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any account's permissions via the… | |
| CVE-2026-108867 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById handler that allows any… | |
| CVE-2026-108868 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish templated system announcements… | |
| CVE-2026-108869 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to send system announcements by… | |
| CVE-2026-108870 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler that allows low-privileged… | |
| CVE-2026-108871 | 11 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleController that lets… | |
| CVE-2026-108872 | 11 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserController that allows any… | |
| CVE-2026-108679 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any… | |
| CVE-2026-108680 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling… | |
| CVE-2026-108672 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows… | |
| CVE-2026-108673 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler that allows any authenticated… | |
| CVE-2026-108674 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that allows low-privileged… | |
| CVE-2026-108675 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handler that allows low-privileged… | |
| CVE-2026-108676 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles handler that allows… | |
| CVE-2026-108677 | 10 Oct 2026 | CVSS 6.5 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users… | |
| CVE-2026-108678 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated… | |
| CVE-2026-108665 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit handler that allows any authenticated user… | |
| CVE-2026-108666 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler of AiragPromptsController that allows any… | |
| CVE-2026-108667 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to restore deleted AI prompt… | |
| CVE-2026-108668 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin handler that allows any… | |
| CVE-2026-108669 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeController that lacks Shiro… | |
| CVE-2026-108670 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsController that allows any… | |
| CVE-2026-108671 | 10 Oct 2026 | CVSS 6.5 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because… | |
| CVE-2026-108658 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any… | |
| CVE-2026-108659 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any… | |
| CVE-2026-108660 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT… | |
| CVE-2026-108661 | 10 Oct 2026 | CVSS 6.5 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST… | |
| CVE-2026-108662 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant… | |
| CVE-2026-108663 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated… | |
| CVE-2026-108664 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler that allows low-privileged… | |
| CVE-2026-108651 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows… | |
| CVE-2026-108652 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar handler that allows any authenticated… | |
| CVE-2026-108653 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryPageList handler of OpenApiController that allows any… | |
| CVE-2026-108654 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController queryById handler that allows low-privileged… | |
| CVE-2026-108655 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById handler that allows low-privileged… | |
| CVE-2026-108656 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint… | |
| CVE-2026-108657 | 10 Oct 2026 | CVSS 8.1 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated… | |
| CVE-2026-108644 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that allows any authenticated user… | |
| CVE-2026-108645 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenticated user to edit category… | |
| CVE-2026-108646 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler that allows any authenticated… | |
| CVE-2026-108647 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create validation rules… | |
| CVE-2026-108648 | 10 Oct 2026 | CVSS 6.5 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController… | |
| CVE-2026-108649 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets… | |
| CVE-2026-108650 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any… | |
| CVE-2026-108638 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via… | |
| CVE-2026-108639 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently delete data dictionaries via… | |
| CVE-2026-108640 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler that lacks Shiro permission… | |
| CVE-2026-108641 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users'… | |
| CVE-2026-108642 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows authenticated users to modify… | |
| CVE-2026-108643 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete category dictionary… | |
| CVE-2026-108631 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController delete handler that allows low-privileged… | |
| CVE-2026-108632 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById handler that allows any… | |
| CVE-2026-108633 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create department permission… | |
| CVE-2026-108634 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete department permission… | |
| CVE-2026-108635 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpoint of SysDepartController… | |
| CVE-2026-108636 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any… | |
| CVE-2026-108637 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by… | |
| CVE-2026-108624 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch handler that allows low-privileged… | |
| CVE-2026-108625 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message push records… | |
| CVE-2026-108626 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler that allows low-privileged… | |
| CVE-2026-108627 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController that lets any authenticated… | |
| CVE-2026-108628 | 10 Oct 2026 | CVSS 8.1 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that… | |
| CVE-2026-108629 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissionController that allows any… | |
| CVE-2026-108630 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any authenticated user to modify… | |
| CVE-2026-108617 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by… | |
| CVE-2026-108618 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message templates via… | |
| CVE-2026-108619 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete message templates via… | |
| CVE-2026-108620 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatch handler that allows any authenticated… | |
| CVE-2026-108621 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that allows any authenticated user… | |
| CVE-2026-108622 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allows any authenticated user to… | |
| CVE-2026-108623 | 10 Oct 2026 | CVSS 7.1 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user… | |
| CVE-2026-108611 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated… | |
| CVE-2026-108612 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows… | |
| CVE-2026-108613 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticated user… | |
| CVE-2026-108614 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler that allows any authenticated… | |
| CVE-2026-108615 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged… | |
| CVE-2026-108616 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any… | |
| CVE-2026-108605 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user… | |
| CVE-2026-108606 | 10 Oct 2026 | CVSS 5.4 | JeecgBootJeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user… | |
| CVE-2026-108607 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI video… | |
| CVE-2026-108608 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI voice… | |
| CVE-2026-108609 | 10 Oct 2026 | CVSS 4.3 | JeecgBootJeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' AI voice… |
Page 1 of 2