CVE-2026-108641 | JeecgBoot up to 3.9.5 SysAnnouncementSendController.getOne sendId redirect

October 11, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in JeecgBoot up to 3.9.5. This issue affects the function SysAnnouncementSendController.getOne. This manipulation of the argument sendId causes open redirect.

This vulnerability is handled as CVE-2026-108641. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More