CVE-2026-108635 | JeecgBoot up to 3.9.5 Departmenthead Endpoint getDepartmentHead improper authorization

October 11, 2026 Yanac

A vulnerability labeled as problematic has been found in JeecgBoot up to 3.9.5. Affected is an unknown function of the file /sys/sysDepart/getDepartmentHead of the component Departmenthead Endpoint. Such manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-108635. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More