Skip to content
Threat Feed
Subscribe

Tag

Jeecgboot

2 briefs RSS
medium advisory

JeecgBoot Improper Access Control Vulnerability (CVE-2026-9580)

JeecgBoot up to version 3.9.1 is vulnerable to improper access control in the LoginController.selectDepart function, allowing remote attackers to bypass intended restrictions.

JeecgBoot cve access control
1r 1t 1c
high advisory

JeecgBoot AI Chat Module Authentication Bypass Vulnerability

JeecgBoot versions 3.9.0 and 3.9.1 are vulnerable to a remote unauthenticated bypass in the AI Chat Module, specifically affecting the JeecgBizToolsProvider.java file, potentially allowing unauthorized access.

jeecgboot authentication-bypass ai-chat-module
2r 1t 1c