Login Request a demo
JE
Product
JeecgBoot
by jeecgboot · last CVE Oct 18, 2026
113
CVEs
0
On KEV
8.1
Max CVSS
101
New 30D
Vulnerabilities113In the news0Timeline
Severity mix
Critical 0High 6Medium 104Low 3
Severity
All severities113Critical0High6Medium104Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add JeecgBoot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-108657
8.1
0%
Oct 10
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply
Affected: through 3.9.5
CVE-2026-108628
8.1
0%
Oct 10
JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint
Affected: through 3.9.5
CVE-2026-58377
8.1
0%
Jun 30
JeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret Keys
Affected: through 3.9.2
CVE-2026-19000
7.3
0%
Aug 6
JeecgBoot Anonymous Chat Attachment send server-side request forgery
Affected: 3.9.0; 3.9.1; 3.9.2
CVE-2026-9580
7.3
0%
May 26
JeecgBoot selectDepart LoginController.selectDepart access control
Affected: 3.9.0; 3.9.1
CVE-2026-108623
7.1
0%
Oct 10
JeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch
Affected: through 3.9.5
Showing 6