# JeecgBoot.

Every CVE that names JeecgBoot among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [JeecgBoot through 3.9.5 Missing Authorization via /sys/category/edit](https://agentprime.io/advisories/CVE-2026-108645.md)
  `CVE-2026-108645` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/category/delete](https://agentprime.io/advisories/CVE-2026-108644.md)
  `CVE-2026-108644` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/category/deleteBatch](https://agentprime.io/advisories/CVE-2026-108643.md)
  `CVE-2026-108643` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 IDOR via PUT /sys/sysAnnouncementSend/edit](https://agentprime.io/advisories/CVE-2026-108642.md)
  `CVE-2026-108642` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 IDOR via /sys/sysAnnouncementSend/getOne](https://agentprime.io/advisories/CVE-2026-108641.md)
  `CVE-2026-108641` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/queryById](https://agentprime.io/advisories/CVE-2026-108640.md)
  `CVE-2026-108640` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/deletePhysic/{id}](https://agentprime.io/advisories/CVE-2026-108639.md)
  `CVE-2026-108639` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUser](https://agentprime.io/advisories/CVE-2026-108638.md)
  `CVE-2026-108638` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via deleteUserGroupBatch Endpoint](https://agentprime.io/advisories/CVE-2026-108637.md)
  `CVE-2026-108637` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcel](https://agentprime.io/advisories/CVE-2026-108636.md)
  `CVE-2026-108636` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint](https://agentprime.io/advisories/CVE-2026-108635.md)
  `CVE-2026-108635` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission deleteBatch Endpoint](https://agentprime.io/advisories/CVE-2026-108634.md)
  `CVE-2026-108634` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add](https://agentprime.io/advisories/CVE-2026-108633.md)
  `CVE-2026-108633` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission queryById Endpoint](https://agentprime.io/advisories/CVE-2026-108632.md)
  `CVE-2026-108632` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/delete](https://agentprime.io/advisories/CVE-2026-108631.md)
  `CVE-2026-108631` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/edit](https://agentprime.io/advisories/CVE-2026-108630.md)
  `CVE-2026-108630` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint](https://agentprime.io/advisories/CVE-2026-108629.md)
  `CVE-2026-108629` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint](https://agentprime.io/advisories/CVE-2026-108628.md)
  `CVE-2026-108628` · CVE record: jeecgboot JeecgBoot · CVSS 8.6 High · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint](https://agentprime.io/advisories/CVE-2026-108627.md)
  `CVE-2026-108627` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysMessage queryById Endpoint](https://agentprime.io/advisories/CVE-2026-108626.md)
  `CVE-2026-108626` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysMessage Edit Endpoint](https://agentprime.io/advisories/CVE-2026-108625.md)
  `CVE-2026-108625` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endpoint](https://agentprime.io/advisories/CVE-2026-108624.md)
  `CVE-2026-108624` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch](https://agentprime.io/advisories/CVE-2026-108623.md)
  `CVE-2026-108623` · CVE record: jeecgboot JeecgBoot · CVSS 7.1 High · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/log/delete Endpoint](https://agentprime.io/advisories/CVE-2026-108622.md)
  `CVE-2026-108622` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/position/edit](https://agentprime.io/advisories/CVE-2026-108621.md)
  `CVE-2026-108621` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /sys/position/deleteBatch](https://agentprime.io/advisories/CVE-2026-108620.md)
  `CVE-2026-108620` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBatch Endpoint](https://agentprime.io/advisories/CVE-2026-108619.md)
  `CVE-2026-108619` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint](https://agentprime.io/advisories/CVE-2026-108618.md)
  `CVE-2026-108618` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endpoint](https://agentprime.io/advisories/CVE-2026-108617.md)
  `CVE-2026-108617` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/deleteBatch](https://agentprime.io/advisories/CVE-2026-108616.md)
  `CVE-2026-108616` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/delete](https://agentprime.io/advisories/CVE-2026-108615.md)
  `CVE-2026-108615` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls](https://agentprime.io/advisories/CVE-2026-108614.md)
  `CVE-2026-108614` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint](https://agentprime.io/advisories/CVE-2026-108613.md)
  `CVE-2026-108613` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch](https://agentprime.io/advisories/CVE-2026-108612.md)
  `CVE-2026-108612` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/word/delete Endpoint](https://agentprime.io/advisories/CVE-2026-108611.md)
  `CVE-2026-108611` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint](https://agentprime.io/advisories/CVE-2026-108610.md)
  `CVE-2026-108610` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter](https://agentprime.io/advisories/CVE-2026-108609.md)
  `CVE-2026-108609` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter](https://agentprime.io/advisories/CVE-2026-108608.md)
  `CVE-2026-108608` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter](https://agentprime.io/advisories/CVE-2026-108607.md)
  `CVE-2026-108607` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/deleteById](https://agentprime.io/advisories/CVE-2026-108606.md)
  `CVE-2026-108606` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit Endpoint](https://agentprime.io/advisories/CVE-2026-108605.md)
  `CVE-2026-108605` · CVE record: jeecgboot JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [JeecgBoot AiragModelController.java exportXls access control](https://agentprime.io/advisories/CVE-2026-86228.md)
  `CVE-2026-86228` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Privilege escalation, Broken access control
- [JeecgBoot Anonymous Chat Attachment send server-side request forgery](https://agentprime.io/advisories/CVE-2026-19000.md)
  `CVE-2026-19000` · CVE record: JeecgBoot · CVSS 6.9 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret Keys](https://agentprime.io/advisories/CVE-2026-58377.md)
  `CVE-2026-58377` · CVE record: jeecgboot JeecgBoot · CVSS 8.6 High · Not analysed yet · Published 30 Jun 2026 · Tags: Broken access control
- [JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect](https://agentprime.io/advisories/CVE-2026-11502.md)
  `CVE-2026-11502` · CVE record: JeecgBoot · CVSS 2.3 Low · Not analysed yet · Published 8 Jun 2026 · Tags: Open redirect
- [JeecgBoot User List Endpoint SysUserController.java queryPageList information disclosure](https://agentprime.io/advisories/CVE-2026-11464.md)
  `CVE-2026-11464` · CVE record: JeecgBoot · CVSS 2.3 Low · Not analysed yet · Published 7 Jun 2026 · Tags: Information disclosure, Broken access control
- [JeecgBoot test server-side request forgery](https://agentprime.io/advisories/CVE-2026-10240.md)
  `CVE-2026-10240` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot edit WordUtil.addImage server-side request forgery](https://agentprime.io/advisories/CVE-2026-10239.md)
  `CVE-2026-10239` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot AiragModelController access control](https://agentprime.io/advisories/CVE-2026-9604.md)
  `CVE-2026-9604` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Privilege escalation, Broken access control
- [JeecgBoot add access control](https://agentprime.io/advisories/CVE-2026-9581.md)
  `CVE-2026-9581` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Privilege escalation, Broken access control
- [JeecgBoot selectDepart LoginController.selectDepart access control](https://agentprime.io/advisories/CVE-2026-9580.md)
  `CVE-2026-9580` · CVE record: JeecgBoot · CVSS 6.9 Medium · Not analysed yet · Published 26 May 2026 · Tags: Privilege escalation, Broken access control
- [JeecgBoot SysUser userEdit user.getUsername access control](https://agentprime.io/advisories/CVE-2026-9579.md)
  `CVE-2026-9579` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Privilege escalation, Broken access control
- [JeecgBoot OpenAPI Endpoint call improper authentication](https://agentprime.io/advisories/CVE-2026-9373.md)
  `CVE-2026-9373` · CVE record: JeecgBoot · CVSS 6.3 Medium · Not analysed yet · Published 24 May 2026 · Tags: Authentication bypass
- [JeecgBoot mLogin Endpoint LoginController.java authorization](https://agentprime.io/advisories/CVE-2026-8196.md)
  `CVE-2026-8196` · CVE record: JeecgBoot · CVSS 6.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Broken access control
- [JeecgBoot SVG File CommonController.java cross site scripting](https://agentprime.io/advisories/CVE-2026-8195.md)
  `CVE-2026-8195` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [JeecgBoot JSON Object loadTreeData sql injection](https://agentprime.io/advisories/CVE-2026-8114.md)
  `CVE-2026-8114` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2026 · Tags: Other injection, SQL injection
- [JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side request forgery](https://agentprime.io/advisories/CVE-2026-7605.md)
  `CVE-2026-7605` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery](https://agentprime.io/advisories/CVE-2026-7604.md)
  `CVE-2026-7604` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery](https://agentprime.io/advisories/CVE-2026-7603.md)
  `CVE-2026-7603` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot FillRuleUtil edit improper authorization](https://agentprime.io/advisories/CVE-2026-7602.md)
  `CVE-2026-7602` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Privilege escalation, Broken access control

Newest: <https://agentprime.io/advisories/technology/jeecgboot.md>
Older: <https://agentprime.io/advisories/technology/jeecgboot.md?cursor=WyIyMDI2LTA1LTAyVDAzOjE1OjEyLjgyMDAwMFoiLCJDVkUtMjAyNi03NjAyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=jeecgboot&cursor=WyIyMDI2LTEwLTEwVDIxOjQ5OjM2LjA1OTAwMFoiLCJDVkUtMjAyNi0xMDg2NDYiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/jeecgboot/?cursor=WyIyMDI2LTEwLTEwVDIxOjQ5OjM2LjA1OTAwMFoiLCJDVkUtMjAyNi0xMDg2NDYiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.