What’s Vulnerable › Products

Exrick xboot vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Exrick xboot version is affected

Latest Exrick xboot vulnerabilities

• CVE-2026-111689 — XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint (CVSS 4.3)
• CVE-2026-111688 — Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter (CVSS 4.3)
• CVE-2025-8528 — Exrick xboot getMenuList sensitive information in a cookie (CVSS 5.9)
• CVE-2025-8527 — Exrick xboot Swagger SecurityController.java server-side request forgery (CVSS 8.8)
• CVE-2025-8526 — Exrick xboot UploadController.java upload unrestricted upload (CVSS 9.8)
• CVE-2025-8525 — Exrick xboot Spring Boot Admin/Spring Actuator information disclosure (CVSS 5.3)