CVE-2026-108672 | JeecgBoot up to 3.9.5 VideoRecords handler getVideoRecords userId authorization

October 11, 2026 Yanac

A vulnerability classified as problematic was found in JeecgBoot up to 3.9.5. This impacts the function getVideoRecords of the component VideoRecords handler. Executing a manipulation of the argument userId can lead to authorization bypass.

This vulnerability appears as CVE-2026-108672. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More