What’s Vulnerable › Products

JeecgBoot vulnerabilities

104 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 102 published in the last 12 months.

Check whether your JeecgBoot version is affected

Latest JeecgBoot vulnerabilities

• CVE-2026-112017 — JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass (CVSS 6.5)
• CVE-2026-108891 — JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId (CVSS 4.3)
• CVE-2026-108888 — JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls (CVSS 4.3)
• CVE-2026-108887 — JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls (CVSS 4.3)
• CVE-2026-108886 — JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername (CVSS 4.3)
• CVE-2026-108885 — JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete (CVSS 5.4)
• CVE-2026-108884 — JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint (CVSS 5.4)
• CVE-2026-108883 — JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig (CVSS 6.5)
• CVE-2026-108882 — JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser (CVSS 5.4)
• CVE-2026-108881 — JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo (CVSS 4.3)
• CVE-2026-108880 — JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId (CVSS 4.3)
• CVE-2026-108879 — JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter (CVSS 4.3)
• CVE-2026-108878 — JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById (CVSS 4.3)
• CVE-2026-108877 — JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete (CVSS 5.4)
• CVE-2026-108876 — JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit (CVSS 4.3)
• CVE-2026-108875 — JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup (CVSS 4.3)
• CVE-2026-108874 — JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson (CVSS 4.3)
• CVE-2026-108873 — JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo (CVSS 4.3)
• CVE-2026-108872 — JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers (CVSS 4.3)
• CVE-2026-108871 — JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule (CVSS 5.4)
• CVE-2026-108870 — JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule (CVSS 5.4)
• CVE-2026-108869 — JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement (CVSS 4.3)
• CVE-2026-108868 — JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement (CVSS 4.3)
• CVE-2026-108867 — JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById (CVSS 4.3)
• CVE-2026-108866 — JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths (CVSS 4.3)