CVE-2026-108866 | JeecgBoot up to 3.9.5 Authorization Check queryUserAuths userId improper authorization

October 11, 2026 Yanac

A vulnerability classified as problematic has been found in JeecgBoot up to 3.9.5. This issue affects the function queryUserAuths of the component Authorization Check. This manipulation of the argument userId causes improper authorization.

This vulnerability is registered as CVE-2026-108866. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More