EUVD-2026-96575

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments. Low-privileged attackers can upload a crafted Excel workbook to POST /sys/sysDepart/appImportExcel to create arbitrary...

EUVD-2026-96574

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpoint of SysDepartController that allows any authenticated user to list department staff. Low-privileged attackers can enumerate departId values to retrieve staff names, avatars,...

CVE-2026-108636 JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcel

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments. Low-privileged attackers can upload a crafted Excel workbook to POST /sys/sysDepart/appImportExcel to create arbitrary...

CVE-2026-108636

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization vulnerability in the SysDepartController appImportExcel handler. This flaw allows any authenticated user to perform actions typically reserved for administrators. Specifically, a low-privileged attacker can upload a crafte...

CVE-2026-108635 JeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpoint of SysDepartController that allows any authenticated user to list department staff. Low-privileged attackers can enumerate departId values to retrieve staff names, avatars,...

CVE-2026-108635

JeecgBoot versions through 3.9.5 are susceptible to a missing authorization vulnerability (CWE-862) within the SysDepartController component. Specifically, the GET /sys/sysDepart/getDepartmentHead endpoint fails to adequately restrict access, allowing any authenticated user to view department sta...