PT-2026-109900

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw allows authenticated users to permanently delete data dictionaries. Low-privileged attackers can send DELETE requests to the '/sys/dict/deletePhysic/id' endpoint, which trigge...

PT-2026-109866

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the updateById handler of the AiOcrController. This issue allows any authenticated user to modify global OCR templates by sending PUT requests to the '/airag/ocr/edi...

CVE-2026-108627: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController that lets any authenticated user query role data rules. Low-privileged attackers can request GET /sys/role/datarule/permissionId/roleId to read rule names, columns, conditions,...

PT-2026-109874

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the AiragAppController release handler. This issue allows any authenticated user to publish or unpublish AI applications belonging to other users. An attacker with l...

PT-2026-109883

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the SysLogController delete handler, allowing any authenticated user to delete audit log entries. Low-privileged attackers can retrieve log identifiers from the...

PT-2026-109891

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the SysDepartPermissionController that allows authenticated users to modify department permission records. Attackers with low privileges can retrieve row identifiers...

PT-2026-109928

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can restore deleted AI prompt templates due to missing authorization. This is achieved by sending PUT requests to the '/airag/prompts/revertRecycleBin' endpoint...

PT-2026-109930

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the embeddingSearch handler of the AiragKnowledgeController due to missing Shiro permission annotations. This allows authenticated users with low privileges to acces...

PT-2026-109880

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can delete message templates due to missing authorization. This is possible via the 'DELETE /sys/message/sysMessageTemplate/deleteBatch' endpoint. By providing...

PT-2026-109911

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the getUserPermissionSet handler of the SystemApiController. This issue allows an authenticated user with low privileges to retrieve the complete permission set of a...

PT-2026-109884

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the deleteBatch handler of the SysLogController. This issue allows any authenticated user, including those with low privileges, to delete system audit log entries. B...

PT-2026-109890

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the saveDatarule handler of the SysDepartPermissionController. This issue allows authenticated users with low privileges to modify department data rules by sending...

PT-2026-109482

Name of the Vulnerable Software and Affected Versions 3D Product configurator for WooCommerce versions prior to 2.16.3 Description Remote Code Execution is possible due to missing authentication and nonce checks on the wp loaded handler. The issue occurs because the xpv image POST parameter is no...

CVE-2026-103889: Unrestricted Upload of File with Dangerous Type

The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpvimage' parameter parameter. This is due to missing authentication and nonce checks on the wploaded handler combined with no sanitization...

PT-2026-109905

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the delete handler of the SysCategoryController. This issue allows any authenticated user to delete category dictionary nodes. Attackers with low privileges can...

PT-2026-109904

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can delete category dictionary entries due to missing authorization. Attackers can retrieve node identifiers from the unguarded rootList and childList endpoints a...

PT-2026-109918

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An issue exists in the SysTenantController passApply handler where missing authorization allows any authenticated user to approve tenant administrator applications. An attacker can submit a pending...

PT-2026-109938

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can retrieve the stored password values of any user due to missing authorization in the GET '/sys/api/getUserByName' endpoint. An attacker can use the hard-coded...

PT-2026-109919

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the queryTenantAuthInfo handler within the SysTenantController. This issue allows any authenticated user to access records belonging to other tenants. Low-privileged...

CVE-2026-108634: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete department permission bindings via the DELETE /sys/sysDepartPermission/deleteBatch endpoint. Attackers can obtain row ids from the unguarded list endpoint and submit the...