CVE-2026-124554 | JeecgBoot 3.9.5 JimuBI getAllChartData params sql injection

A vulnerability was found in JeecgBoot 3.9.5. It has been classified as critical. This affects an unknown part of the file /jeecg-boot/drag/onlDragDatasetHead/getAllChartData of the component JimuBI. Performing a manipulation of the argument params results in sql injection.

This vulnerability is known as CVE-2026-124554. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More