Medium severity · published Oct 18, 2026
CVE-2026-112017
JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like /sys/dict/getDictItems for boolean or time-based blind injection, extracting database contents including administrator password hashes from sys_user.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JE
JeecgBoot · jeecgboot
before 3.9.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-112017
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-112017
github.com
https://github.com/jeecgboot/JeecgBoot
github.com
https://github.com/jeecgboot/JeecgBoot/blob/v3.9.2/jeecg-boot/jeecg-boot-base-core/src/main/java/org/jeecg/common/util/SqlInjectionUtil.java#L269-L305
github.com
https://github.com/jeecgboot/JeecgBoot/commit/a2be896f753936956ee6863b632b8e5a0231345c
github.com
https://github.com/jeecgboot/JeecgBoot/issues/9677
github.com
https://github.com/jeecgboot/JeecgBoot/releases/tag/v3.9.5
www.vulncheck.com
https://www.vulncheck.com/advisories/jeecgboot-before-3.9.5-sql-injection-via-sqlinjectionutil-newline-bypass
More from JeecgBoot
8.1
CVE-2026-108657
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply
8.1
CVE-2026-108628
JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint
8.1
CVE-2026-58377
JeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret Keys
7.3
CVE-2026-19000
JeecgBoot Anonymous Chat Attachment send server-side request forgery
7.3
CVE-2026-9580
JeecgBoot selectDepart LoginController.selectDepart access control