CVE-2026-9580
A vulnerability was determined in JeecgBoot up to 3.9.1. The affected element is the function LoginController.selectDepart of the file /sys/
CVSS
7.3
Alto
EPSS
0.3%
p21
KEV
—
Exploit Today
6
0-100
Publicado: 26 may 2026 · Última mod.: 24 jul 2026 · CWE-266 · CWE-284
0.3%EPSS · 30 días0.3%
2026-08-102026-09-06
A vulnerability was determined in JeecgBoot up to 3.9.1. The affected element is the function LoginController.selectDepart of the file /sys/selectDepart. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.9.2 is sufficient to fix this issue. It is suggested to upgrade the affected component.
- github.comhttps://github.com/jeecgboot/JeecgBoot/
- github.comhttps://github.com/jeecgboot/JeecgBoot/issues/9597
- github.comhttps://github.com/jeecgboot/JeecgBoot/issues/9597#issuecomment-4385501959
- github.comhttps://github.com/jeecgboot/JeecgBoot/releases/tag/v3.9.2
- vuldb.comhttps://vuldb.com/submit/817892
- vuldb.comhttps://vuldb.com/vuln/365636
- vuldb.comhttps://vuldb.com/vuln/365636/cti
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-865195.3 MED—
———A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public and could be used.2hCVE-2026-865164.7 MED—
———A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege management. It is possible to initiate the attack remotely. The patch is named 6ab3147282d867c1993f995272750db091c2290b. Applying a patch is the recommended action to fix this issue.3hCVE-2026-865126.3 MED—
———A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.4hCVE-2026-865005.5 MED—
———In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin14hCVE-2026-864828.8 ALT—
———In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation14hCVE-2026-863085.3 MED—
———A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DB_DEBUG results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.17h