CVE-2026-108674 | JeecgBoot up to 3.9.5 OpenAPI Controller /openapi/queryById id improper authorization

October 11, 2026 Yanac

A vulnerability, which was classified as problematic, was found in JeecgBoot up to 3.9.5. Affected by this vulnerability is the function queryById of the file /openapi/queryById of the component OpenAPI Controller. The manipulation of the argument ID results in improper authorization.

This vulnerability is known as CVE-2026-108674. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More