Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 275/1809
6.5
CVE-2026-108661

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer te

4.3
CVE-2026-108660

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tena

4.3
CVE-2026-108659

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId

4.3
CVE-2026-108658

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo ha

8.1
CVE-2026-108657

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that

4.3
CVE-2026-108656

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTen

4.3
CVE-2026-108655

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById handler that

4.3
CVE-2026-108654

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController queryById handler that a

4.3
CVE-2026-108653

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryPageList handler of OpenApiController

4.3
CVE-2026-108652

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar handler t

4.3
CVE-2026-108651

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiContr

4.3
CVE-2026-108650

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiC

4.3
CVE-2026-108649

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiCon

6.5
CVE-2026-108648

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endp

4.3
CVE-2026-108647

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

4.3
CVE-2026-108646

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler

4.3
CVE-2026-108645

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenti

5.4
CVE-2026-108644

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that

5.4
CVE-2026-108643

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

4.3
CVE-2026-108642

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows auth

4.3
CVE-2026-108641

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re

4.3
CVE-2026-108640

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler

5.4
CVE-2026-108639

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently

4.3
CVE-2026-108638

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

4.3
CVE-2026-108637

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

4.3
CVE-2026-108636

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler

4.3
CVE-2026-108635

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpo

5.4
CVE-2026-108634

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

4.3
CVE-2026-108633

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

4.3
CVE-2026-108632

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById ha

5.4
CVE-2026-108631

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController delete handl

4.3
CVE-2026-108630

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any

4.3
CVE-2026-108629

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissio

8.1
CVE-2026-108628

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepa

4.3
CVE-2026-108627

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController

4.3
CVE-2026-108626

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler tha

4.3
CVE-2026-108625

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

5.4
CVE-2026-108624

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch handler t

7.1
CVE-2026-108623

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that

5.4
CVE-2026-108622

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allow

4.3
CVE-2026-108621

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that al

5.4
CVE-2026-108620

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatch handler

5.4
CVE-2026-108619

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

4.3
CVE-2026-108618

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

4.3
CVE-2026-108617

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

5.4
CVE-2026-108616

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler

5.4
CVE-2026-108615

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that

4.3
CVE-2026-108614

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler t

5.4
CVE-2026-108613

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that al

5.4
CVE-2026-108612

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch han

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →