jeecgboot JeecgBoot

• CVE-2026-108655 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/quartzJob/queryById 0.2%
• CVE-2026-108654 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById 0.2%
• CVE-2026-108653 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list 0.2%
• CVE-2026-108652 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/updateAvatar 0.2%
• CVE-2026-108651 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getRolesByUserId 0.2%
• CVE-2026-108650 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserPermissionSet 0.2%
• CVE-2026-108649 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRolesById 0.2%
• CVE-2026-108648 Medium 6.5 JeecgBoot through 3.9.5 Missing Authorization via getDynamicDbSourceByCode Endpoint 0.3%
• CVE-2026-108647 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/checkRule/importExcel 0.3%
• CVE-2026-108646 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcel 0.2%
• CVE-2026-108645 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/category/edit 0.2%
• CVE-2026-108644 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/category/delete 0.3%
• CVE-2026-108643 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/category/deleteBatch 0.3%
• CVE-2026-108642 Medium 4.3 JeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncementSend/edit 0.2%
• CVE-2026-108641 Medium 4.3 JeecgBoot through 3.9.5 IDOR via /sys/sysAnnouncementSend/getOne 0.2%
• CVE-2026-108640 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/queryById 0.2%
• CVE-2026-108639 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/deletePhysic/{id} 0.3%
• CVE-2026-108638 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUser 0.2%
• CVE-2026-108637 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via deleteUserGroupBatch Endpoint 0.2%
• CVE-2026-108636 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcel 0.2%
• CVE-2026-108635 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint 0.2%
• CVE-2026-108634 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission deleteBatch Endpoint 0.3%
• CVE-2026-108633 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add 0.2%
• CVE-2026-108632 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission queryById Endpoint 0.2%
• CVE-2026-108631 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/delete 0.3%
• CVE-2026-108630 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/edit 0.2%
• CVE-2026-108629 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint 0.2%
• CVE-2026-108628 High 8.1 JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint 0.2%
• CVE-2026-108627 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint 0.2%
• CVE-2026-108626 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via sysMessage queryById Endpoint 0.2%
• CVE-2026-108625 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via sysMessage Edit Endpoint 0.2%
• CVE-2026-108624 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endpoint 0.3%
• CVE-2026-108623 High 7.1 JeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch 0.3%
• CVE-2026-108622 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/log/delete Endpoint 0.3%
• CVE-2026-108621 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /sys/position/edit 0.2%
• CVE-2026-108620 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /sys/position/deleteBatch 0.3%
• CVE-2026-108619 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBatch Endpoint 0.3%
• CVE-2026-108618 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint 0.2%
• CVE-2026-108617 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endpoint 0.2%
• CVE-2026-108616 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/deleteBatch 0.3%
• CVE-2026-108615 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/delete 0.3%
• CVE-2026-108614 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls 0.2%
• CVE-2026-108613 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint 0.3%
• CVE-2026-108612 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch 0.3%
• CVE-2026-108611 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/word/delete Endpoint 0.3%
• CVE-2026-108610 Medium 4.3 JeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint 0.2%
• CVE-2026-108609 Medium 4.3 JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter 0.2%
• CVE-2026-108608 Medium 4.3 JeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter 0.2%
• CVE-2026-108607 Medium 4.3 JeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter 0.2%
• CVE-2026-108606 Medium 5.4 JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/deleteById 0.3%