Log in Start free

jeecgboot

Products

ProductCVEsExploitedLatest
JeecgBoot102–Oct 18, 2026
JimuReport8–Aug 17, 2026
jeewx-boot2–Aug 31, 2026
The server processes these URLs1–Jun 1, 2026

Exploited and recent CVEs

  • CVE-2026-112017 Medium 6.5 JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass 0.3%
  • CVE-2026-108891 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId 0.2%
  • CVE-2026-108888 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls 0.2%
  • CVE-2026-108887 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls 0.2%
  • CVE-2026-108886 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername 0.2%
  • CVE-2026-108885 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete 0.2%
  • CVE-2026-108884 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint 0.2%
  • CVE-2026-108883 Medium 6.5 JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig 0.2%
  • CVE-2026-108882 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser 0.2%
  • CVE-2026-108881 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo 0.2%
  • CVE-2026-108880 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId 0.2%
  • CVE-2026-108879 Medium 4.3 JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter 0.2%
  • CVE-2026-108878 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById 0.2%
  • CVE-2026-108877 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete 0.2%
  • CVE-2026-108876 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit 0.2%
  • CVE-2026-108875 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup 0.2%
  • CVE-2026-108874 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson 0.2%
  • CVE-2026-108873 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo 0.2%
  • CVE-2026-108872 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers 0.2%
  • CVE-2026-108871 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule 0.2%
  • CVE-2026-108870 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule 0.2%
  • CVE-2026-108869 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement 0.2%
  • CVE-2026-108868 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement 0.2%
  • CVE-2026-108867 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById 0.2%
  • CVE-2026-108866 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths 0.2%
  • CVE-2026-108680 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement 0.2%
  • CVE-2026-108679 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncement 0.2%
  • CVE-2026-108678 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles 0.2%
  • CVE-2026-108677 Medium 6.5 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName 0.2%
  • CVE-2026-108676 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/downLoadFiles 0.2%