2026-10-11 归档

今日共收录 1127 条安全情报，包含 372 个 CVE，412 篇安全通告，以及 88 篇研究论文。

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler that allows low-privileged authenticated users to read any m...

CVE-2026-108626

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler tha

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message push records by calling PUT /sys/message/...

CVE-2026-108625

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch handler that allows low-privileged authenticated users to delete m...

CVE-2026-108624

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch handler t

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log ...

CVE-2026-108623

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allows any authenticated user to delete audit log entries. Low...

CVE-2026-108622

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that allows any authenticated user to modify organizational posi...

CVE-2026-108621

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that al

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatch handler that allows any authenticated user to delete organization...

CVE-2026-108620

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatch handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete message templates via the DELETE /sys/message/sys...

CVE-2026-108619

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message templates via PUT /sys/message/sysMessage...

CVE-2026-108618

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sy...

CVE-2026-108617

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluato...

CVE-2026-108616

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI e...

CVE-2026-108615

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler that allows any authenticated user to export AI evaluator ...

CVE-2026-108614

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler t

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticated user to publish or unpublish other...

CVE-2026-108613

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that al

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to de...

CVE-2026-108612

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch han

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templat...

CVE-2026-108611

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler that allows any authenticated user to modify word templates...

CVE-2026-108610

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler th

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' AI voice generation history via the userI...

CVE-2026-108609

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI voice records by supplying an arbitr...

CVE-2026-108608

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI video generation records by supplyin...

CVE-2026-108607

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de

历史摘要 · 未重新核验 · NVD

#cve #cwe-639