CVE-2026-108676 | JeecgBoot up to 3.9.5 SysAnnouncementController poc_announcement_file_download.py downLoadFiles announcement id improper authorization

October 11, 2026 Yanac

A vulnerability was found in JeecgBoot up to 3.9.5 and classified as problematic. This affects the function downLoadFiles of the file JeecgBoot/poc_announcement_file_download.py of the component SysAnnouncementController. Such manipulation of the argument announcement id leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-108676. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More