https://feed.craftedsignal.io/products/jeecgboot--3.9.6/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 18:45:08 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-jeecgboot-ssrf-cve-2026-126997/Thu, 12 Nov 2026 18:45:08 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-jeecgboot-ssrf-cve-2026-126997/A server-side request forgery vulnerability in JeecgBoot versions up to 3.9.6 allows remote attackers to trigger unauthorized requests via the RestTemplate.exchange function.<p>A server-side request forgery (SSRF) vulnerability has been identified in JeecgBoot versions up to 3.9.6. The flaw exists within the RestTemplate.exchange function located in the org/jeecg/modules/airag/flow/c/a.class file of the flow-run component. Remote exploitation is possible, and public exploit code is available. The vendor did not respond to disclosure attempts.</p> mediumadvisory