CVE-2026-108680 | JeecgBoot up to 3.9.5 Template Notification sendTemplateAnnouncement sender/recipients/title/template improper authorization

October 11, 2026 Yanac

A vulnerability categorized as problematic has been discovered in JeecgBoot up to 3.9.5. The affected element is an unknown function of the file /sys/api/sendTemplateAnnouncement of the component Template Notification. The manipulation of the argument sender/recipients/title/template results in improper authorization.

This vulnerability is identified as CVE-2026-108680. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More