CVE-2026-108656 | JeecgBoot up to 3.9.5 SysTenantController tenantId missing authentication

October 11, 2026 Yanac

A vulnerability identified as problematic has been detected in JeecgBoot up to 3.9.5. The impacted element is an unknown function of the component SysTenantController. This manipulation of the argument tenantId causes missing authentication.

This vulnerability is tracked as CVE-2026-108656. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More