CVE-2026-108663 | JeecgBoot up to 3.9.5 SysTenantController deleteApply tenantId/packId/userId missing authentication

October 11, 2026 Yanac

A vulnerability was found in JeecgBoot up to 3.9.5. It has been classified as problematic. Affected by this vulnerability is the function deleteApply of the component SysTenantController. This manipulation of the argument tenantId/packId/userId causes missing authentication.

The identification of this vulnerability is CVE-2026-108663. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More