CVE-2026-9604

MediumCVSS 4.3/10Last modified Jul 24, 2026

Description

A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of the component AiragModelController. The manipulation of the argument list/queryById results in improper access controls. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 3.9.2 is able to resolve this issue. The affected component should be upgraded.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-266 CWE-284

Affected software

No affected versions have been published.

Timeline

Published: May 26, 2026
Last modified: Jul 24, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-960448.8No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-96057.3A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwg CVE-2026-96067.3A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the file /manage_user.php. CVE-2026-96076.3A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of the file /parcel_lis CVE-2026-960717.5Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.CVE-2026-96082.4A vulnerability was determined in QianFox FoxCMS up to 1.2.6. The impacted element is an unknown function of the file /Tag/edit of the compo CVE-2026-96094.7A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads t CVE-2026-960969.8Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.CVE-2026-96105.3IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked i CVE-2026-961087.8Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-961139.8Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.CVE-2026-961187.8Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.