Login Request a demo
JB
Product
Jeecg Boot
by Jeecg · last CVE Apr 1, 2026
57
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities57In the news0Timeline
Severity mix
Critical 21High 11Medium 19Low 6
Severity
All severities57Critical21High11Medium19Low6
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jeecg Boot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2822
8.8
0%
Feb 20
JeecgBoot Backend airag_app,1,create_by sql injection
Affected: through 3.9.1
CVE-2026-1746
8.8
0%
Feb 2
JeecgBoot Online Report API loadDictItemByKeyword sql injection
Affected: 3.9.0
CVE-2025-10707
8.8
0%
Sep 19
JeecgBoot sendMsg improper authorization
Affected: through 3.8.2
CVE-2025-10318
8.8
0%
Sep 12
JeecgBoot WebSocket Message sendWebSocketMsg improper authorization
Affected: through 3.8.2
CVE-2025-14909
8.1
1%
Dec 19
JeecgBoot SysUserOnlineController.java SysUserOnlineController user session
Affected: through 3.9.0
CVE-2025-14908
8.1
0%
Dec 19
JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication
Affected: through 3.9.0
CVE-2026-2555
7.5
0%
Feb 16
JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization
Affected: 3.9.1
CVE-2025-15126
7.5
0%
Dec 28
JeecgBoot getPositionUserList improper authorization
Affected: through 3.9.0
CVE-2025-4533
7.5
1%
May 11
JeecgBoot Document Library Upload zip unzipFile resource consumption
Affected: through 3.8.0
CVE-2023-41578
7.5
1%
Sep 8
Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection
Affected: through 3.5.3
CVE-2020-28087
7.5
2%
Aug 6
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information
Affected: 2.3
Showing 11