CVE-2026-108891 | JeecgBoot up to 3.9.5 SysUserController getUserDetailByUserId userId improper authorization

October 11, 2026 Yanac

A vulnerability was found in JeecgBoot up to 3.9.5. It has been rated as problematic. This issue affects the function getUserDetailByUserId of the component SysUserController. The manipulation of the argument userId leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-108891. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More