CVE-2026-108645 | JeecgBoot up to 3.9.5 Category Controller /sys/category/edit node id improper authorization

October 11, 2026 Yanac

A vulnerability has been found in JeecgBoot up to 3.9.5 and classified as problematic. The affected element is an unknown function of the file /sys/category/edit of the component Category Controller. Performing a manipulation of the argument node id results in improper authorization.

This vulnerability was named CVE-2026-108645. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More