2026-10-11 归档

今日共收录 1127 条安全情报，包含 372 个 CVE，412 篇安全通告，以及 88 篇研究论文。

← 返回归档列表

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler that allows any authenticated user to import category dic...

CVE-2026-108646

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenticated user to edit category dictionary nodes via /sys/cat...

CVE-2026-108645

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that allows any authenticated user to delete category dictiona...

CVE-2026-108644

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete category dictionary entries via DELETE /sys/categ...

CVE-2026-108643

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows authenticated users to modify other users' message delivery r...

CVE-2026-108642

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows auth

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' in-application messages via the getOne ha...

CVE-2026-108641

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler that lacks Shiro permission annotations. Low-privileged a...

CVE-2026-108640

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently delete data dictionaries via the deletePhysic handler of...

CVE-2026-108639

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler...

CVE-2026-108638

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/de...

CVE-2026-108637

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments...

CVE-2026-108636

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpoint of SysDepartController that allows any authenticated ...

CVE-2026-108635

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpo

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete department permission bindings via the DELETE /sy...

CVE-2026-108634

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create department permission bindings via POST /sys/sysD...

CVE-2026-108633

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById handler that allows any authenticated user to read departme...

CVE-2026-108632

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById ha

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController delete handler that allows low-privileged authenticated users to dele...

CVE-2026-108631

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController delete handl

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any authenticated user to modify department permission record...

CVE-2026-108630

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissionController that allows any authenticated user to modify ...

CVE-2026-108629

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissio

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user...

CVE-2026-108628

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepa

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController that lets any authenticated user query role data rules. L...

CVE-2026-108627

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController

历史摘要 · 未重新核验 · NVD

#cve #cwe-862