Mmastodon TechnologyCybersecurity first seen 4 d ago, last 4 d ago, peak #12
JeecgBoot missing authorization flaw tracked as CVE-2026-108677
Original: CVE-2026-108677: JeecgBoot https:// radar.offseq.com/threat/jeecgb oot-through-395-contains-a-missing-authorization-vuln
A newly tracked vulnerability, CVE-2026-108677, affects JeecgBoot versions through 3.9.5. The flaw is a missing authorization check in the getSysApiGetUserByName endpoint, potentially allowing unauthorized access to user information. The issue is circulating among cybersecurity practitioners, who are flagging it for patching and further analysis.
Why now: A newly published CVE in the widely used JeecgBoot low-code platform is being flagged to security teams for assessment and patching.
JeecgBootCVE-2026-108677OffSeq
Evidence
- CVE-2026-108677: JeecgBoot https:// radar.offseq.com/threat/jeecgb oot-through-395-contains-a-missing-authorization-vulnerability-in-get-sysapigetuserbyname-that-7f20d1febc0733a0 # OffSeq # JeecgBoot # Vuln # infosec · offseq@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/1919645