jeecgboot vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20254
3. 2026107

Newest CVEs

• CVE-2026-112017

  JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass

  jeecgboot · JeecgBoot

  High7.1
• CVE-2026-108891

  JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId

  jeecgboot · JeecgBoot

  Medium5.3
• CVE-2026-108888

  JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls

  jeecgboot · JeecgBoot

  Medium5.3
• CVE-2026-108887

  JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls

  jeecgboot · JeecgBoot

  Medium5.3
• CVE-2026-108886

  JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername

  jeecgboot · JeecgBoot

  Medium5.3
• CVE-2026-108885

  JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete

  jeecgboot · JeecgBoot

  Medium5.3
• CVE-2026-108884

  JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint

  jeecgboot · JeecgBoot

  Medium5.3
• CVE-2026-108883

  JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig

  jeecgboot · JeecgBoot

  High7.1
• CVE-2026-108882

  JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser

  jeecgboot · JeecgBoot

  Medium5.3
• CVE-2026-108881

  JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo

  jeecgboot · JeecgBoot

  Medium5.3