Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

JeecgBoot — Vulnerabilities & Security Advisories 153

All 153 CVE vulnerabilities found in JeecgBoot, with AI-generated Chinese analysis, references, and POCs.

This page documents common weakness vulnerabilities associated with the JeecgBoot open-source development platform developed by Jeecg. It serves as a centralized aggregation resource for tracking security issues within this specific software ecosystem. The content on this page collects vulnerability reports related to framework misconfigurations, input validation errors, and potential remote code execution flaws. The data covers publicly disclosed security incidents from the platform's inception through the current year, ensuring a comprehensive historical view of its security posture. By aggregating data from various public vulnerability databases and vendor announcements, this resource aims to provide clarity on the evolving threat landscape for JeecgBoot users. Visitors can use this page to track a vendor's advisories and understand the specific weakness classes that affect the application. It allows developers and security administrators to look up a product's vulnerability history, helping them assess risk exposure and prioritize patching efforts. Understanding these patterns aids in identifying recurring issues in the codebase or configuration defaults. This structured view supports informed decision-making regarding upgrade paths and security hardening measures. By consolidating disparate reports into a single location, it simplifies the process of maintaining secure deployments of the JeecgBoot platform. Users can monitor new disclosures as they emerge and compare them against past incidents to gauge the severity and impact of each reported flaw.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-108649 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRolesById CWE-862 4.3 Medium 2026-10-10
CVE-2026-108648 JeecgBoot through 3.9.5 Missing Authorization via getDynamicDbSourceByCode Endpoint CWE-862 6.5 Medium 2026-10-10
CVE-2026-108647 JeecgBoot through 3.9.5 Missing Authorization via /sys/checkRule/importExcel CWE-862 4.3 Medium 2026-10-10
CVE-2026-108646 JeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcel CWE-862 4.3 Medium 2026-10-10
CVE-2026-108645 JeecgBoot through 3.9.5 Missing Authorization via /sys/category/edit CWE-862 4.3 Medium 2026-10-10
CVE-2026-108644 JeecgBoot through 3.9.5 Missing Authorization via /sys/category/delete CWE-862 5.4 Medium 2026-10-10
CVE-2026-108643 JeecgBoot through 3.9.5 Missing Authorization via /sys/category/deleteBatch CWE-862 5.4 Medium 2026-10-10
CVE-2026-108642 JeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncementSend/edit CWE-639 4.3 Medium 2026-10-10
CVE-2026-108641 JeecgBoot through 3.9.5 IDOR via /sys/sysAnnouncementSend/getOne CWE-639 4.3 Medium 2026-10-10
CVE-2026-108640 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/queryById CWE-862 4.3 Medium 2026-10-10
CVE-2026-108638 JeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUser CWE-862 4.3 Medium 2026-10-10
CVE-2026-108639 JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/deletePhysic/{id} CWE-862 5.4 Medium 2026-10-10
CVE-2026-108637 JeecgBoot through 3.9.5 Missing Authorization via deleteUserGroupBatch Endpoint CWE-862 4.3 Medium 2026-10-10
CVE-2026-108636 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcel CWE-862 4.3 Medium 2026-10-10
CVE-2026-108635 JeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint CWE-862 4.3 Medium 2026-10-10
CVE-2026-108634 JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission deleteBatch Endpoint CWE-862 5.4 Medium 2026-10-10
CVE-2026-108633 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add CWE-862 4.3 Medium 2026-10-10
CVE-2026-108632 JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission queryById Endpoint CWE-862 4.3 Medium 2026-10-10
CVE-2026-108631 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/delete CWE-862 5.4 Medium 2026-10-10
CVE-2026-108630 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/edit CWE-862 4.3 Medium 2026-10-10
CVE-2026-108629 JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint CWE-862 4.3 Medium 2026-10-10
CVE-2026-108628 JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint CWE-862 8.1 High 2026-10-10
CVE-2026-108627 JeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint CWE-862 4.3 Medium 2026-10-10
CVE-2026-108626 JeecgBoot through 3.9.5 Missing Authorization via sysMessage queryById Endpoint CWE-862 4.3 Medium 2026-10-10
CVE-2026-108625 JeecgBoot through 3.9.5 Missing Authorization via sysMessage Edit Endpoint CWE-862 4.3 Medium 2026-10-10
CVE-2026-108624 JeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endpoint CWE-862 5.4 Medium 2026-10-10
CVE-2026-108623 JeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch CWE-862 7.1 High 2026-10-10
CVE-2026-108622 JeecgBoot through 3.9.5 Missing Authorization via /sys/log/delete Endpoint CWE-862 5.4 Medium 2026-10-10
CVE-2026-108620 JeecgBoot through 3.9.5 Missing Authorization via /sys/position/deleteBatch CWE-862 5.4 Medium 2026-10-10
CVE-2026-108621 JeecgBoot through 3.9.5 Missing Authorization via /sys/position/edit CWE-862 4.3 Medium 2026-10-10

All 153 known CVE vulnerabilities affecting JeecgBoot with full Chinese analysis, references, and POCs where available.