JeecgBoot vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

JE

Product

JeecgBoot

by · last CVE May 9, 2026

36

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities36 In the news0 Timeline

Severity mix

Critical 0High 10Medium 19Low 7

Severity

All severities36 Critical0 High10 Medium19 Low7

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add JeecgBoot to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-2945	6.5	0%	Feb 22	JeecgBoot uploadImgByHttp server-side request forgery Affected: 3.9.0
CVE-2025-10981	6.5	0%	Sep 26	JeecgBoot exportXls improper authorization Affected: 3.8.0; 3.8.1; 3.8.2
CVE-2025-10980	6.5	0%	Sep 25	JeecgBoot exportXls improper authorization Affected: 3.8.0; 3.8.1; 3.8.2
CVE-2025-10979	6.5	0%	Sep 25	JeecgBoot exportXls improper authorization Affected: 3.8.0; 3.8.1; 3.8.2
CVE-2025-10978	6.5	0%	Sep 25	JeecgBoot Filter exportXls improper authorization Affected: 3.8.0; 3.8.1; 3.8.2
CVE-2025-10319	6.5	0%	Sep 12	JeecgBoot Tenant Log Export exportLog improper authorization Affected: 3.8.0; 3.8.1; 3.8.2
CVE-2026-8114	6.3	0%	May 7	JeecgBoot JSON Object loadTreeData sql injection Affected: 3.9.0; 3.9.1
CVE-2026-7605	6.3	0%	May 2	JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side request forgery Affected: 3.9.0; 3.9.1
CVE-2026-7604	6.3	0%	May 2	JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery Affected: 3.9.0; 3.9.1
CVE-2026-7603	6.3	0%	May 2	JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery Affected: 3.9.0; 3.9.1
CVE-2026-7602	6.3	0%	May 2	JeecgBoot FillRuleUtil edit improper authorization Affected: 3.9.0; 3.9.1
CVE-2026-7290	6.3	0%	Apr 28	JeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injection Affected: 3.9.0; 3.9.1
CVE-2026-5999	6.3	0%	Apr 10	JeecgBoot SysAnnouncementController improper authorization Affected: 3.9.0; 3.9.1
CVE-2026-3672	6.3	0%	Mar 7	JeecgBoot getDictItems isExistSqlInjectKeyword sql injection Affected: 3.9.0; 3.9.1
CVE-2025-10977	5.3	0%	Sep 25	JeecgBoot deleteBatch improper authorization Affected: 3.8.0; 3.8.1; 3.8.2
CVE-2025-10976	5.3	0%	Sep 25	JeecgBoot getDepartUserList improper authorization Affected: 3.8.0; 3.8.1; 3.8.2
CVE-2025-15121	4.9	0%	Dec 28	JeecgBoot getDeptRoleByUserId information disclosure Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more
CVE-2026-8195	4.3	0%	May 9	JeecgBoot SVG File CommonController.java cross site scripting Affected: 3.9.0; 3.9.1
CVE-2026-2111	4.3	1%	Feb 7	JeecgBoot Retrieval-Augmented Generation edit path traversal Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +4 more