CVE-2026-108647

JeecgBoot versions through 3.9.5 are susceptible to a missing authorization vulnerability within the SysCheckRuleController importExcel handler. This flaw allows low-privileged authenticated users to bypass the system:checkRule:add permission by uploading a crafted Excel workbook . Successful exp...

CVE-2026-108646

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw in the SysCategoryController importExcel handler. This vulnerability allows any authenticated user to upload crafted Excel workbooks to bulk insert arbitrary nodes into the system-wide sys_category dictionary, includi...

ATTACKdatamap - A Datasource Assessment On An Event Level To Show Potential Coverage Or The MITRE ATT&CK Framework

A datasource assessment on an event level to show potential coverage of the "MITRE ATT&CK" framework. This tool is developed by me and has no affiliation with "MITRE" nor with its great "ATT&CK" team, it is developed with the intention to ease the mapping of data sources to assess one's potential...