CVE-2026-108873 | JeecgBoot up to 3.9.5 Department Update doUpdateDepartInfo department_id missing authentication

October 11, 2026 Yanac

A vulnerability categorized as problematic has been discovered in JeecgBoot up to 3.9.5. This affects an unknown part of the file /sys/user/doUpdateDepartInfo of the component Department Update. Executing a manipulation of the argument department_id can lead to missing authentication.

The identification of this vulnerability is CVE-2026-108873. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More