CVE-2026-108619

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw (CWE-862) in the sysMessageTemplate component. Specifically, the DELETE /sys/message/sysMessageTemplate/deleteBatch endpoint fails to properly restrict access, allowing low-privileged authenticated users to delete mes...