CVE-2026-108662 | JeecgBoot up to 3.9.5 deleteTenantPackUser userId/packId improper authorization

October 11, 2026 Yanac

A vulnerability was found in JeecgBoot up to 3.9.5 and classified as problematic. Affected is an unknown function of the file /sys/tenant/deleteTenantPackUser. The manipulation of the argument userId/packId results in improper authorization.

This vulnerability was named CVE-2026-108662. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More