What’s Vulnerable › Products

jeequan jeepay vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your jeequan jeepay version is affected

Latest jeequan jeepay vulnerabilities

• CVE-2026-111608 — Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId} (CVSS 4.2)
• CVE-2026-111607 — Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs (CVSS 7.1)
• CVE-2026-18631 — jeequan jeepay PreAuthorize SysLogController.java WebSecurityConfig authorization (CVSS 6.3)