2026

Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write in

Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler t

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send templa

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiCo

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiControl

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-pri

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles ha

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handle

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that a

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler t

JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGeneration

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP se

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsCo

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeC

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin ha

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler of AiragPromptsControl

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit handler that a

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler t

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler th

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer te

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tena

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo ha

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTen

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById handler that

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController queryById handler that a

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryPageList handler of OpenApiController

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar handler t

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiContr

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiC

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiCon

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endp

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenti

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows auth

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpo

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById ha