PT-2026-109940

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the sendBusAnnouncement handler of the SystemApiController. This issue allows any authenticated user to send announcements without possessing the necessary...

PT-2026-109941

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement. Low-privileged attackers can supply forged sender, recipients, title, and template parameters to deliver...

PT-2026-109886

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can modify message push records due to missing authorization. By calling the endpoint "PUT /sys/message/sysMessage/edit", an attacker can provide any sys sms reco...

PT-2026-109880

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can delete message templates due to missing authorization. This is possible via the 'DELETE /sys/message/sysMessageTemplate/deleteBatch' endpoint. By providing...

CVE-2026-108677: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by...

CVE-2026-108636: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments. Low-privileged attackers can upload a crafted Excel workbook to POST /sys/sysDepart/appImportExcel to create arbitrary...

CVE-2026-108669: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeController that lacks Shiro permission annotations. Low-privileged authenticated attackers can supply knowledge base ids to the GET /airag/knowledge/embedding/search endpoint to...

CVE-2026-108624: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch handler that allows low-privileged authenticated users to delete message records. Attackers can obtain record ids from the unguarded list endpoint and submit them to deleteBatch to remov...

PT-2026-109866

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the updateById handler of the AiOcrController. This issue allows any authenticated user to modify global OCR templates by sending PUT requests to the '/airag/ocr/edi...

PT-2026-109664

Name of the Vulnerable Software and Affected Versions cc-connect versions prior to 1.5.1 Description The MAX platform adapter webhook mode in platform/max/max.go fails to require authentication when no webhook secret is configured. Remote attackers can access the webhook listener on port 8080 and...

PT-2026-109535

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2. This is due to the publicly reachable steps start and steps load step routes...

PT-2026-109936

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handler that allows low-privileged authenticated users to change announcement pin status. Attackers can send POST or PUT requests with any announcement id to pin or unpin system notic...

PT-2026-109926

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit handler that allows any authenticated user to modify AI prompt templates. Low-privileged attackers can send PUT or POST requests to /airag/prompts/edit with a template id to overwrite prompt...

PT-2026-109934

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the exportXls handler within the AiragPromptsController. This issue allows any authenticated user, including those with low privileges, to export all AI prompts from...

CVE-2026-108676: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles handler that allows low-privileged authenticated users to download announcement attachments. Attackers can supply a known announcement id to retrieve a ZIP of attachments from...

PT-2026-109930

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the embeddingSearch handler of the AiragKnowledgeController due to missing Shiro permission annotations. This allows authenticated users with low privileges to acces...

PT-2026-109887

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the queryById handler of the SysMessageController. This issue allows authenticated users with low privileges to access any message push record by providing arbitrary...

PT-2026-109924

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the SysTenantController deleteApply handler. This issue allows any authenticated user, including those with low privileges, to reject tenant administrator...

PT-2026-109920

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the listPackByTenantUserId handler within the SysTenantController. This issue allows authenticated users with low privileges to query tenant product packs by providi...

PT-2026-109895

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can delete department permission bindings due to missing authorization. An attacker can retrieve row identifiers from an unguarded list endpoint and provide them...