EUVD-2026-96596

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT...

CVE-2026-108657

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT...

CVE-2026-108657 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT...

CVE-2026-108657

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw in the SysTenantController passApply handler. This security weakness allows any authenticated user to approve tenant administrator applications. Specifically, an attacker can submit a pending application using doApply...

CVE-2026-108657

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT...

CVE-2026-108657 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT...

CVE-2026-108657 JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT...

PT-2026-109918

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An issue exists in the SysTenantController passApply handler where missing authorization allows any authenticated user to approve tenant administrator applications. An attacker can submit a pending...

CVE-2026-108657: Missing Authorization

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT...