EUVD-2026-96546

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI video generation records by supplying arbitrary userId values to DELETE /airag/video/deleteVideoRecord. Attackers can obtain record ids from the unchecked G...

CVE-2026-108607

JeecgBoot versions through 3.9.5 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the AI video generation module. Authenticated users can delete other users' AI video generation records by providing arbitrary userId values to the DELETE /airag/video/deleteVideoRecord ...