JE
Product
JeecgBoot
113
CVEs
0
On KEV
8.1
Max CVSS
101
New 30D
Severity mix
Critical 0High 6Medium 104Low 3
Watch
Add JeecgBoot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108866 | 4.3 | Oct 11 | JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths Affected: through 3.9.5 |
| CVE-2026-108680 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement Affected: through 3.9.5 |
| CVE-2026-108679 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusAnnouncement Affected: through 3.9.5 |
| CVE-2026-108678 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRoles Affected: through 3.9.5 |
| CVE-2026-108676 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/downLoadFiles Affected: through 3.9.5 |
| CVE-2026-108675 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/annountCement/editIzTop Affected: through 3.9.5 |
| CVE-2026-108674 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById Affected: through 3.9.5 |
| CVE-2026-108673 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/exportXls Affected: through 3.9.5 |
| CVE-2026-108672 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser Affected: through 3.9.5 |
| CVE-2026-108670 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experiment Affected: through 3.9.5 |
| CVE-2026-108669 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /airag/knowledge/embedding/search Affected: through 3.9.5 |
| CVE-2026-108667 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/revertRecycleBin Affected: through 3.9.5 |
| CVE-2026-108665 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/edit Affected: through 3.9.5 |
| CVE-2026-108664 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/queryById Affected: through 3.9.5 |
| CVE-2026-108663 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApply Affected: through 3.9.5 |
| CVE-2026-108660 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/updateApplyStatus Affected: through 3.9.5 |
| CVE-2026-108659 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/listPackByTenantUserId Affected: through 3.9.5 |
| CVE-2026-108658 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/queryTenantAuthInfo Affected: through 3.9.5 |
| CVE-2026-108656 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via getTenantPackApplyUsers Endpoint Affected: through 3.9.5 |
| CVE-2026-108655 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/quartzJob/queryById Affected: through 3.9.5 |
| CVE-2026-108654 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById Affected: through 3.9.5 |
| CVE-2026-108653 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list Affected: through 3.9.5 |
| CVE-2026-108652 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/api/updateAvatar Affected: through 3.9.5 |
| CVE-2026-108651 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getRolesByUserId Affected: through 3.9.5 |
| CVE-2026-108650 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserPermissionSet Affected: through 3.9.5 |
| CVE-2026-108649 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRolesById Affected: through 3.9.5 |
| CVE-2026-108647 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/checkRule/importExcel Affected: through 3.9.5 |
| CVE-2026-108646 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcel Affected: through 3.9.5 |
| CVE-2026-108645 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/category/edit Affected: through 3.9.5 |
| CVE-2026-108642 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncementSend/edit Affected: through 3.9.5 |
| CVE-2026-108641 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 IDOR via /sys/sysAnnouncementSend/getOne Affected: through 3.9.5 |
| CVE-2026-108640 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/queryById Affected: through 3.9.5 |
| CVE-2026-108638 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUser Affected: through 3.9.5 |
| CVE-2026-108637 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via deleteUserGroupBatch Endpoint Affected: through 3.9.5 |
| CVE-2026-108636 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcel Affected: through 3.9.5 |
| CVE-2026-108635 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint Affected: through 3.9.5 |
| CVE-2026-108633 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add Affected: through 3.9.5 |
| CVE-2026-108632 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission queryById Endpoint Affected: through 3.9.5 |
| CVE-2026-108630 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/edit Affected: through 3.9.5 |
| CVE-2026-108629 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint Affected: through 3.9.5 |
| CVE-2026-108627 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint Affected: through 3.9.5 |
| CVE-2026-108626 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via sysMessage queryById Endpoint Affected: through 3.9.5 |
| CVE-2026-108625 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via sysMessage Edit Endpoint Affected: through 3.9.5 |
| CVE-2026-108621 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /sys/position/edit Affected: through 3.9.5 |
| CVE-2026-108618 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint Affected: through 3.9.5 |
| CVE-2026-108617 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endpoint Affected: through 3.9.5 |
| CVE-2026-108614 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls Affected: through 3.9.5 |
| CVE-2026-108610 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint Affected: through 3.9.5 |
| CVE-2026-108609 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter Affected: through 3.9.5 |
| CVE-2026-108608 | 4.3 | Oct 10 | JeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter Affected: through 3.9.5 |