CVE 5.3 MEDIUM

JeecgBoot Backend airag_app,1,create_by sql injection_CVE-2026-2822

5.3 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A security vulnerability has been detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file /jeecgboot/sys/dict/loadDict/airag_app,1,create_by of the component Backend Interface. Such manipulation of the argument keyword leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

Basic Information

ID CVE-2026-2822
Source VulDB
Published Feb 20, 2026 at 04:32

Affected Product

Vendor n/a
Product JeecgBoot
Version 3.9.0
Affected Versions n/a JeecgBoot 3.9.0
n/a JeecgBoot 3.9.1

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.