What’s Vulnerable › Products
JeecgBoot vulnerabilities
79 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 51 published in the last 12 months.
Check whether your JeecgBoot version is affected
Latest JeecgBoot vulnerabilities
- CVE-2026-86228 — JeecgBoot AiragModelController.java exportXls access control (CVSS 4.3)
- CVE-2026-19000 — JeecgBoot Anonymous Chat Attachment send server-side request forgery (CVSS 7.3)
- CVE-2026-11502 — JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect (CVSS 3.1)
- CVE-2026-11464 — JeecgBoot User List Endpoint SysUserController.java queryPageList information disclosure (CVSS 3.1)
- CVE-2026-10240 — JeecgBoot test server-side request forgery (CVSS 6.3)
- CVE-2026-10239 — JeecgBoot edit WordUtil.addImage server-side request forgery (CVSS 6.3)
- CVE-2026-9604 — JeecgBoot AiragModelController access control (CVSS 4.3)
- CVE-2026-9581 — JeecgBoot add access control (CVSS 6.3)
- CVE-2026-9580 — JeecgBoot selectDepart LoginController.selectDepart access control (CVSS 7.3)
- CVE-2026-9579 — JeecgBoot SysUser userEdit user.getUsername access control (CVSS 6.3)
- CVE-2026-9373 — JeecgBoot OpenAPI Endpoint call improper authentication (CVSS 3.7)
- CVE-2026-8196 — JeecgBoot mLogin Endpoint LoginController.java authorization (CVSS 3.7)
- CVE-2026-8195 — JeecgBoot SVG File CommonController.java cross site scripting (CVSS 4.3)
- CVE-2026-8114 — JeecgBoot JSON Object loadTreeData sql injection (CVSS 6.3)
- CVE-2026-7605 — JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side request forgery (CVSS 6.3)
- CVE-2026-7604 — JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery (CVSS 6.3)
- CVE-2026-7603 — JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery (CVSS 6.3)
- CVE-2026-7602 — JeecgBoot FillRuleUtil edit improper authorization (CVSS 6.3)
- CVE-2026-7290 — JeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injection (CVSS 6.3)
- CVE-2026-5999 — JeecgBoot SysAnnouncementController improper authorization (CVSS 6.3)
- CVE-2026-5616 — JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication (CVSS 7.3)
- CVE-2024-43028 — (CVSS 9.8)
- CVE-2024-40489 — (CVSS 9.8)
- CVE-2026-3672 — JeecgBoot getDictItems isExistSqlInjectKeyword sql injection (CVSS 6.3)
- CVE-2026-2945 — JeecgBoot uploadImgByHttp server-side request forgery (CVSS 6.5)