CVE-2026-108608

JeecgBoot versions through 3.9.5 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The issue exists in the DELETE /airag/voice/deleteVoiceRecord endpoint, where authenticated users can delete the AI voice records of other users by providing an arbitrary userId parameter. Addition...

Voice records of millions of Brits stored by tax agency without consent

By Carolina According to Big Brother Watch, a British privacy advocate, and civil liberties organization, This is a post from HackRead.com Read the original post: Voice records of millions of Brits stored by tax agency without consent...