CVE-2026-108644 | JeecgBoot up to 3.9.5 Delete poc_console_delete_routes.py SysCategoryController.delete improper authorization

October 11, 2026 Yanac

A vulnerability was found in JeecgBoot up to 3.9.5 and classified as problematic. This issue affects the function SysCategoryController.delete of the file poc_console_delete_routes.py of the component Delete Handler. Such manipulation leads to improper authorization.

This vulnerability is referenced as CVE-2026-108644. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More