CVE-2026-9604: JeecgBoot AiragModelController access control
A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of the component AiragModelController. The manipulation of the argument list/queryById results in improper access controls. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 3.9.2 is able to resolve this issue. The affected component should be upgraded.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JeecgBootto a version that resolves this vulnerability.Fixed in 3.9.2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9604?
CVE-2026-9604 has a medium severity rating of 4.3.
What does CVE-2026-9604 affect?
CVE-2026-9604 affects the AiragModelController component in JeecgBoot up to version 3.9.1.
How can CVE-2026-9604 be exploited?
CVE-2026-9604 can be exploited remotely through improper access controls by manipulating the argument list/queryById.
Is there a patch for CVE-2026-9604?
Users should check for the latest updates to JeecgBoot, as no specific patch details are provided for CVE-2026-9604.
What actions should be taken regarding CVE-2026-9604?
It is recommended to apply security best practices and monitor for unauthorized access due to the publicly disclosed exploit of CVE-2026-9604.