CVE-2026-108677 | JeecgBoot up to 3.9.5 User API /sys/api/getUserByName improper authorization

October 11, 2026 Yanac

A vulnerability was found in JeecgBoot up to 3.9.5. It has been classified as problematic. This vulnerability affects the function getUserByName of the file /sys/api/getUserByName of the component User API. Performing a manipulation results in improper authorization.

This vulnerability was named CVE-2026-108677. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More