CVE-2026-8196

LowCVSS 3.7/10Last modified Jul 24, 2026

Description

A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/LoginController.java of the component mLogin Endpoint. This manipulation causes authorization bypass. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is regarded as difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-285 CWE-639

Affected software

No affected versions have been published.

Timeline

Published: May 9, 2026
Last modified: Jul 24, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-819607.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-819637.8Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges l CVE-2026-819645.5Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.CVE-2026-819697.8Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.CVE-2026-81974.8Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth authorize template renders the integration na CVE-2026-819717.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to CVE-2026-819737.8Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current use CVE-2026-819757.8Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current use CVE-2026-819767.8Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current use CVE-2026-819775.5Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An CVE-2026-819785.5Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could lever CVE-2026-819797.8Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curre