CVE-2026-108654 | JeecgBoot up to 3.9.5 OssFileController /sys/oss/file/queryById OssFileController.queryById id improper authorization

October 11, 2026 Yanac

A vulnerability marked as problematic has been reported in JeecgBoot up to 3.9.5. This vulnerability affects the function OssFileController.queryById of the file /sys/oss/file/queryById of the component OssFileController. The manipulation of the argument ID leads to improper authorization.

This vulnerability is documented as CVE-2026-108654. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More