CVE-2026-2822

CVE-2026-2822 affects JeecgBoot ≤3.9.1 in the Backend Interface. The vulnerability is in the function path /jeecgboot/sys/dict/loadDict/airag_app,1,create_by, where manipulation of the argument keyword leads to SQL injection. The issue is exploitable remotely and exploit details have been publicl...

CVE-2026-2822: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file /jeecgboot/sys/dict/loadDict/airagapp,1,createby of the component Backend Interface. Such manipulation of the argument keyword leads to sql injection. The attack can be...