EUVD-2026-96562

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log entries. Low-privileged attackers can send a DELETE request with ids set to allclear to wipe the entire syslog table,...

CVE-2026-108623

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw in the SysLogController deleteBatch handler. This vulnerability allows any authenticated user to delete system audit log entries. Specifically, low-privileged attackers can execute a DELETE request with ids set to all...