CVE-2026-9604

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-9604

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-9604.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-9604

Published

2026-05-26T22:15:15.467Z

Modified

2026-08-04T11:50:36.802967801Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

JeecgBoot AiragModelController access control

Details

A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of the component AiragModelController. The manipulation of the argument list/queryById results in improper access controls. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 3.9.2 is able to resolve this issue. The affected component should be upgraded.

Database specific

{
    "cwe_ids": [
        "CWE-266",
        "CWE-284"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9604.json"
}

References

Affected packages

Git / github.com/jeecgboot/jeecgboot

Affected ranges

Type

GIT

Repo

https://github.com/jeecgboot/jeecgboot

Events

Introduced

41877a6e8ba6e485bdd25e6dc5d6279e58754707

Last affected

4e03c2c80a4f55692b40f428d1a006fd9cffd670

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "3.9.0"
        },
        {
            "last_affected": "3.9.0"
        },
        {
            "introduced": "3.9.1"
        },
        {
            "last_affected": "3.9.1"
        }
    ]
}

Affected versions

3.*

3.9.0

3.9.1

v3.*

v3.9.0last

v3.9.1

v3.9.1last

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-9604.json"