CVE-2026-78970

JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can access multiple API endpoints including queryAllUser, queryUsersByUsernames, queryUserById, and queryUsersByIds to retrieve...

Delphix Continuous Compliance security vulnerabilities

Delphix Continuous Compliance is an enterprise-grade automated data desensitization and compliance management platform from US-based Delphix, Inc. A security vulnerability exists in Delphix Continuous Compliance version 2025.3.0 and later, which stems from an EOR misconfiguration that could resul...

Weak Password Vulnerability in DCN DCME Multicore Engine

Digital China Group Corporation focuses on providing you with full-stack cloud services, including cloud management services such as cloud management, cloud resource procurement, and proprietary cloud services, as well as data services such as data desensitization and video cloud for various...