CVE-2026-8196: JeecgBoot mLogin Endpoint LoginController.java authorization
A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/LoginController.java of the component mLogin Endpoint. This manipulation causes authorization bypass. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is regarded as difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8196?
CVE-2026-8196 has been assigned a critical severity rating due to its potential exploitation.
How do I fix CVE-2026-8196?
To fix CVE-2026-8196, users should upgrade to a patched version of JeecgBoot that addresses this vulnerability.
What software versions are affected by CVE-2026-8196?
CVE-2026-8196 affects JeecgBoot version 3.9.1.
What component is impacted by CVE-2026-8196?
CVE-2026-8196 impacts the mLogin Endpoint within the LoginController.java file.
Is there a known exploit for CVE-2026-8196?
While specific exploits may not be publicly documented, the nature of CVE-2026-8196 indicates it could be exploited to bypass authorization.