CVE-2026-108640 | JeecgBoot up to 3.9.5 SysDepartRoleController queryById id privileges management

October 11, 2026 Yanac

A vulnerability classified as problematic was found in JeecgBoot up to 3.9.5. This vulnerability affects the function queryById of the file /sys/sysDepartRole/queryById of the component SysDepartRoleController. The manipulation of the argument ID results in improper privilege management.

This vulnerability is known as CVE-2026-108640. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More