CVE-2026-108648 | JeecgBoot up to 3.9.5 DynamicDbSourceByCode Endpoint getDynamicDbSourceByCode dbSourceCode improper authorization

October 11, 2026 Yanac

A vulnerability, which was classified as problematic, was found in JeecgBoot up to 3.9.5. Impacted is an unknown function of the file /sys/api/getDynamicDbSourceByCode of the component DynamicDbSourceByCode Endpoint. Such manipulation of the argument dbSourceCode leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-108648. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More