CVE-2026-108679 | JeecgBoot up to 3.9.5 sendBusAnnouncement handler SystemApiController.sendBusAnnouncement missing authentication

October 11, 2026 Yanac

A vulnerability was found in JeecgBoot up to 3.9.5. It has been rated as problematic. Impacted is the function SystemApiController.sendBusAnnouncement of the file /sys/api/sendBusAnnouncement of the component sendBusAnnouncement handler. The manipulation leads to missing authentication.

This vulnerability is referenced as CVE-2026-108679. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More