CVE-2026-108678 | JeecgBoot up to 3.9.5 UserRoles /sys/api/queryUserRoles username missing authentication

October 11, 2026 Yanac

A vulnerability was found in JeecgBoot up to 3.9.5. It has been declared as problematic. This issue affects the function queryUserRoles of the file /sys/api/queryUserRoles of the component UserRoles Handler. Executing a manipulation of the argument Username can lead to missing authentication.

The identification of this vulnerability is CVE-2026-108678. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More