Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

JeecgBoot — Vulnerabilities & Security Advisories 153

All 153 CVE vulnerabilities found in JeecgBoot, with AI-generated Chinese analysis, references, and POCs.

This page documents common weakness vulnerabilities associated with the JeecgBoot open-source development platform developed by Jeecg. It serves as a centralized aggregation resource for tracking security issues within this specific software ecosystem. The content on this page collects vulnerability reports related to framework misconfigurations, input validation errors, and potential remote code execution flaws. The data covers publicly disclosed security incidents from the platform's inception through the current year, ensuring a comprehensive historical view of its security posture. By aggregating data from various public vulnerability databases and vendor announcements, this resource aims to provide clarity on the evolving threat landscape for JeecgBoot users. Visitors can use this page to track a vendor's advisories and understand the specific weakness classes that affect the application. It allows developers and security administrators to look up a product's vulnerability history, helping them assess risk exposure and prioritize patching efforts. Understanding these patterns aids in identifying recurring issues in the codebase or configuration defaults. This structured view supports informed decision-making regarding upgrade paths and security hardening measures. By consolidating disparate reports into a single location, it simplifies the process of maintaining secure deployments of the JeecgBoot platform. Users can monitor new disclosures as they emerge and compare them against past incidents to gauge the severity and impact of each reported flaw.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-108680 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement CWE-862 4.3 Medium 2026-10-10
CVE-2026-108678 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles CWE-862 4.3 Medium 2026-10-10
CVE-2026-108676 JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/downLoadFiles CWE-862 4.3 Medium 2026-10-10
CVE-2026-108677 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName CWE-862 6.5 Medium 2026-10-10
CVE-2026-108675 JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/editIzTop CWE-862 4.3 Medium 2026-10-10
CVE-2026-108674 JeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById CWE-862 4.3 Medium 2026-10-10
CVE-2026-108673 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/exportXls CWE-862 4.3 Medium 2026-10-10
CVE-2026-108672 JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser CWE-639 4.3 Medium 2026-10-10
CVE-2026-108671 JeecgBoot through 3.9.5 Missing Authorization via /airag/airagMcp/queryById CWE-862 6.5 Medium 2026-10-10
CVE-2026-108670 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experiment CWE-862 4.3 Medium 2026-10-10
CVE-2026-108669 JeecgBoot through 3.9.5 Missing Authorization via /airag/knowledge/embedding/search CWE-862 4.3 Medium 2026-10-10
CVE-2026-108667 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/revertRecycleBin CWE-862 4.3 Medium 2026-10-10
CVE-2026-108668 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteRecycleBin CWE-862 5.4 Medium 2026-10-10
CVE-2026-108666 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteBatch CWE-862 5.4 Medium 2026-10-10
CVE-2026-108664 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/queryById CWE-862 4.3 Medium 2026-10-10
CVE-2026-108665 JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/edit CWE-862 4.3 Medium 2026-10-10
CVE-2026-108663 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApply CWE-862 4.3 Medium 2026-10-10
CVE-2026-108662 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteTenantPackUser CWE-862 5.4 Medium 2026-10-10
CVE-2026-108661 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/changeOwenUserTenant CWE-862 6.5 Medium 2026-10-10
CVE-2026-108660 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/updateApplyStatus CWE-862 4.3 Medium 2026-10-10
CVE-2026-108659 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/listPackByTenantUserId CWE-862 4.3 Medium 2026-10-10
CVE-2026-108658 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/queryTenantAuthInfo CWE-862 4.3 Medium 2026-10-10
CVE-2026-108657 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply CWE-862 8.1 High 2026-10-10
CVE-2026-108656 JeecgBoot through 3.9.5 Missing Authorization via getTenantPackApplyUsers Endpoint CWE-862 4.3 Medium 2026-10-10
CVE-2026-108655 JeecgBoot through 3.9.5 Missing Authorization via /sys/quartzJob/queryById CWE-862 4.3 Medium 2026-10-10
CVE-2026-108654 JeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById CWE-862 4.3 Medium 2026-10-10
CVE-2026-108653 JeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list CWE-862 4.3 Medium 2026-10-10
CVE-2026-108652 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/updateAvatar CWE-862 4.3 Medium 2026-10-10
CVE-2026-108651 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getRolesByUserId CWE-862 4.3 Medium 2026-10-10
CVE-2026-108650 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserPermissionSet CWE-862 4.3 Medium 2026-10-10

All 153 known CVE vulnerabilities affecting JeecgBoot with full Chinese analysis, references, and POCs where available.