EUVD-2026-124435

A vulnerability was identified in JeecgBoot up to 3.9.6. This affects the function RestTemplate.exchange of the file org/jeecg/modules/airag/flow/c/a.class of the component flow-run Endpoint. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The...

CVE-2026-126997

A server-side request forgery (SSRF) vulnerability exists in JeecgBoot versions up to 3.9.6 . The flaw is located in the RestTemplate.exchange function within the file org/jeecg/modules/airag/flow/c/a.class of the flow-run Endpoint component. This vulnerability allows for remote exploitation , an...