CVE-2026-108642 | JeecgBoot up to 3.9.5 Announcement Send list SysAnnouncementSendController improper authorization

October 11, 2026 Yanac

A vulnerability, which was classified as problematic, was found in JeecgBoot up to 3.9.5. This affects the function SysAnnouncementSendController of the file /sys/sysAnnouncementSend/list of the component Announcement Send. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-108642. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More