CVE-2026-108875 | JeecgBoot up to 3.9.5 SysUserController addSysUserGroup missing authentication

October 11, 2026 Yanac

A vulnerability marked as problematic has been reported in JeecgBoot up to 3.9.5. This affects the function addSysUserGroup of the component SysUserController. The manipulation leads to missing authentication.

This vulnerability is listed as CVE-2026-108875. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More