CVE-2026-112017 | JeecgBoot up to 3.9.4 SqlInjectionUtil /sys/dict/getDictItems sql injection

October 18, 2026 Yanac

A vulnerability categorized as critical has been discovered in JeecgBoot up to 3.9.4. Affected by this issue is some unknown functionality of the file /sys/dict/getDictItems of the component SqlInjectionUtil. Such manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-112017. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More