CVE ID :CVE-2026-108628 Published : Oct. 10, 2026, 10:16 p.m. | 1 hour, 13 minutes ago Description :JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to modify...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108628 - JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint

VERWANDTEARTIKEL

CVE-2026-105134

CVE-2026-108657 - JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply

CVE-2026-78533 - WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability

CVE-2026-78535 - WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability

CVE-2026-81797 - WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability

CVE-2026-66566 - WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability