CVE-2026-108638 | JeecgBoot up to 3.9.5 SysUserController deleteGroupUser groupId/userId improper authorization

October 11, 2026 Yanac

A vulnerability has been found in JeecgBoot up to 3.9.5 and classified as problematic. This vulnerability affects the function deleteGroupUser of the component SysUserController. This manipulation of the argument groupId/userId causes improper authorization.

The identification of this vulnerability is CVE-2026-108638. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More