HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-108623 — JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy...

·Source: NIST NVD

Updated:

Executive Summary

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log entries. Low-privileged attackers can send a DELETE request with ids set to allclear to wipe the entire sys_log table, erasing all users' audit trails.

Analysis

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log entries. Low-privileged attackers can send a DELETE request with ids set to allclear to wipe the entire sys_log table, erasing all users' audit trails. CVSS Score: 7.1. Published: 2026-10-10T22:16:36.870.

Indicators of Compromise (1)

CVE (1)
CVE-2026-108623
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 10, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown

INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects. Codenamed Operation Serengeti III, the cybercrime crackdown took place between June 29 and August 31, 2026. "Authorities identified

The Hacker News
CRITICALVulnerability

New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have released two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the ris

Schneier on Security
MEDIUMVulnerability

Pine Labs and Webxpay bring India's UPI to Sri Lanka

India is Sri Lanka’s largest and fastest-growing tourism source market. In 2025, over 5.3 lakh Indian travellers visited Sri Lanka, making India the country’s largest source of tourists by a wide margin, with this momentum continuing into 2026.

Finextra