Login Request a demo
JE
Product
JeecgBoot
by · last CVE May 9, 2026
36
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities36In the news0Timeline
Severity mix
Critical 0High 10Medium 19Low 7
Severity
All severities36Critical0High10Medium19Low7
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add JeecgBoot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2822
8.8
0%
Feb 20
JeecgBoot Backend airag_app,1,create_by sql injection
Affected: 3.9.0; 3.9.1
CVE-2026-1746
8.8
0%
Feb 2
JeecgBoot Online Report API loadDictItemByKeyword sql injection
Affected: 3.9.0
CVE-2025-10707
8.8
0%
Sep 19
JeecgBoot sendMsg improper authorization
Affected: 3.8.0; 3.8.1; 3.8.2
CVE-2025-10318
8.8
0%
Sep 12
JeecgBoot WebSocket Message sendWebSocketMsg improper authorization
Affected: 3.8.0; 3.8.1; 3.8.2
CVE-2025-14909
8.1
1%
Dec 19
JeecgBoot SysUserOnlineController.java SysUserOnlineController user session
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more
CVE-2025-14908
8.1
0%
Dec 19
JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more
CVE-2026-2555
7.5
0%
Feb 16
JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization
Affected: 3.9.1
CVE-2025-15126
7.5
0%
Dec 28
JeecgBoot getPositionUserList improper authorization
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more
CVE-2025-4533
7.5
1%
May 11
JeecgBoot Document Library Upload zip unzipFile resource consumption
Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +3 more
CVE-2026-5616
7.3
0%
Apr 6
JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication
Affected: 3.9.0; 3.9.1
Showing 10