CVE-2026-108632 | JeecgBoot up to 3.9.5 Department Permission Controller queryById SysDepartPermissionController.queryById id improper authorization

October 11, 2026 Yanac

A vulnerability identified as problematic has been detected in JeecgBoot up to 3.9.5. This impacts the function SysDepartPermissionController.queryById of the file /sys/sysDepartPermission/queryById of the component Department Permission Controller. This manipulation of the argument ID causes improper authorization.

This vulnerability is registered as CVE-2026-108632. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More