HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-19000 — A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used. A fix is planned for the upcoming release.

Analysis

A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used. A fix is planned for the upcoming release. CVSS Score: 7.3. Published: 2026-08-06T06:16:32.993.

Indicators of Compromise (1)

CVE (1)
CVE-2026-19000
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 6, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Financial data group ION missed rent payments on three offices - FT

Financial data giant ION Investment Group missed rent payments on offices in three countries this year, according to the Financial Times.

Finextra
MEDIUMVulnerabilityNEW

Levi Strauss says hackers breached employee computers, accessed corporate data

Intruders exfiltrated certain corporate information after gaining access to three company-issued computers through a social engineering attack, Levi Strauss reported.

The Record
LOWVulnerabilityNEW

North Carolina Ports confirms cyberattack disrupting operations

The North Carolina Ports Authority has confirmed that a cyberattack disrupted IT systems and slowed operations at Port of Wilmington, Port of Morehead City, and Charlotte Inland Port. [...]

BleepingComputer