CVE-2026-112017 HIGH 7.1 Jeecgboot — JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass t… 2026-10-18 CVE-2026-108866 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read…● PoC 2026-10-11 CVE-2026-108867 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleS…● PoC 2026-10-11 CVE-2026-108868 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to p…● PoC 2026-10-11 CVE-2026-108869 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-11 CVE-2026-108870 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule h…● PoC 2026-10-11 CVE-2026-108871 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepar…● PoC 2026-10-11 CVE-2026-108872 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUse…● PoC 2026-10-11 CVE-2026-108873 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-11 CVE-2026-108874 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to a…● PoC 2026-10-11 CVE-2026-108875 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGrou…● PoC 2026-10-11 CVE-2026-108876 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUser…● PoC 2026-10-11 CVE-2026-108877 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows a…● PoC 2026-10-11 CVE-2026-108878 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById han…● PoC 2026-10-11 CVE-2026-108879 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController t…● PoC 2026-10-11 CVE-2026-108880 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId…● PoC 2026-10-11 CVE-2026-108881 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that a…● PoC 2026-10-11 CVE-2026-108882 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUser…● PoC 2026-10-11 CVE-2026-108883 HIGH 7.1 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that …● PoC 2026-10-11 CVE-2026-108884 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController del…● PoC 2026-10-11 CVE-2026-108885 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete hand…● PoC 2026-10-11 CVE-2026-108886 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenB…● PoC 2026-10-11 CVE-2026-108887 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls h…● PoC 2026-10-11 CVE-2026-108888 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXl…● PoC 2026-10-11 CVE-2026-108891 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailB…● PoC 2026-10-11 CVE-2026-108605 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handl…● PoC 2026-10-10 CVE-2026-108606 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handl…● PoC 2026-10-10 CVE-2026-108607 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated u…● PoC 2026-10-10 CVE-2026-108608 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated u…● PoC 2026-10-10 CVE-2026-108609 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated u…● PoC 2026-10-10 CVE-2026-108610 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit …● PoC 2026-10-10 CVE-2026-108611 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delet…● PoC 2026-10-10 CVE-2026-108612 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delet…● PoC 2026-10-10 CVE-2026-108613 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handl…● PoC 2026-10-10 CVE-2026-108614 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls…● PoC 2026-10-10 CVE-2026-108615 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete ha…● PoC 2026-10-10 CVE-2026-108616 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBat…● PoC 2026-10-10 CVE-2026-108617 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108618 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108619 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108620 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatc…● PoC 2026-10-10 CVE-2026-108621 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handl…● PoC 2026-10-10 CVE-2026-108622 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler …● PoC 2026-10-10 CVE-2026-108623 HIGH 7.1 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch han…● PoC 2026-10-10 CVE-2026-108624 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch…● PoC 2026-10-10 CVE-2026-108625 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108626 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById h…● PoC 2026-10-10 CVE-2026-108627 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleC…● PoC 2026-10-10 CVE-2026-108628 HIGH 8.6 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint …● PoC 2026-10-10 CVE-2026-108629 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepar…● PoC 2026-10-10 CVE-2026-108630 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that a…● PoC 2026-10-10 CVE-2026-108631 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController de…● PoC 2026-10-10 CVE-2026-108632 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController qu…● PoC 2026-10-10 CVE-2026-108633 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108634 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108635 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartment…● PoC 2026-10-10 CVE-2026-108636 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExc…● PoC 2026-10-10 CVE-2026-108637 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108638 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108639 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to p…● PoC 2026-10-10 CVE-2026-108640 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryByI…● PoC 2026-10-10 CVE-2026-108641 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated u…● PoC 2026-10-10 CVE-2026-108642 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that a…● PoC 2026-10-10 CVE-2026-108643 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108644 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete han…● PoC 2026-10-10 CVE-2026-108645 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows an…● PoC 2026-10-10 CVE-2026-108646 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExce…● PoC 2026-10-10 CVE-2026-108647 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108648 HIGH 7.1 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceB…● PoC 2026-10-10 CVE-2026-108649 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of Sy…● PoC 2026-10-10 CVE-2026-108650 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of …● PoC 2026-10-10 CVE-2026-108651 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of Syst…● PoC 2026-10-10 CVE-2026-108652 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar…● PoC 2026-10-10 CVE-2026-108653 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryPageList handler of OpenApi…● PoC 2026-10-10 CVE-2026-108654 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController queryById hand…● PoC 2026-10-10 CVE-2026-108655 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById ha…● PoC 2026-10-10 CVE-2026-108656 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/ten…● PoC 2026-10-10 CVE-2026-108657 HIGH 8.6 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply ha…● PoC 2026-10-10 CVE-2026-108658 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantA…● PoC 2026-10-10 CVE-2026-108659 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTe…● PoC 2026-10-10 CVE-2026-108660 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to m…● PoC 2026-10-10 CVE-2026-108661 HIGH 7.1 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to t…● PoC 2026-10-10 CVE-2026-108662 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108663 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply …● PoC 2026-10-10 CVE-2026-108664 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById…● PoC 2026-10-10 CVE-2026-108665 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit hand…● PoC 2026-10-10 CVE-2026-108666 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler of AiragProm…● PoC 2026-10-10 CVE-2026-108667 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticate…● PoC 2026-10-10 CVE-2026-108668 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRec…● PoC 2026-10-10 CVE-2026-108669 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of Airag…● PoC 2026-10-10 CVE-2026-108670 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of Aira…● PoC 2026-10-10 CVE-2026-108671 HIGH 7.1 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to r…● PoC 2026-10-10 CVE-2026-108672 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of Video…● PoC 2026-10-10 CVE-2026-108673 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls…● PoC 2026-10-10 CVE-2026-108674 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById hand…● PoC 2026-10-10 CVE-2026-108675 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIz…● PoC 2026-10-10 CVE-2026-108676 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLo…● PoC 2026-10-10 CVE-2026-108677 HIGH 7.1 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allo…● PoC 2026-10-10 CVE-2026-108678 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of System…● PoC 2026-10-10 CVE-2026-108679 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of S…● PoC 2026-10-10 CVE-2026-108680 MEDIUM 5.3 Jeecgboot — JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to s…● PoC 2026-10-10