JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete
CVE-2026-108877
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authent
#cwe-862
共收录 3939 条相关情报。
← 返回所有主题JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit
CVE-2026-108876
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup
CVE-2026-108875
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson
CVE-2026-108874
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or r
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo
CVE-2026-108873
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers
CVE-2026-108872
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserControlle
JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule
CVE-2026-108871
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleContr
JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule
CVE-2026-108870
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler tha
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement
CVE-2026-108869
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement
CVE-2026-108868
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish tem
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById
CVE-2026-108867
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById han
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths
CVE-2026-108866
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any accou
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbitrary apps via the ...
CVE-2026-108855
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user t
phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP clients to read restricted FAQs because Search::searchDa...
CVE-2026-108851
phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP
CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to list permission-restricted resources because ResourceControl...
CVE-2026-108697
CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to lis
UnicomAI Wanwu through 0.6.5 Missing Authorization via DELETE /v1/appspace/app/publish
CVE-2026-108855
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user t
CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction
CVE-2026-108697
CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to lis
Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operati...
CVE-2026-108756
Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-
CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web session holder to read other users' LOB export files from a ...
CVE-2026-108745
CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web ses
CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members persist credentials w...
CVE-2026-108742
CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that le