CVE-2026-108684

A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.java of the component Autocomplete Data Handler. Performing a manipulation of the argument searchVal results in sql injection. The attack can be initiated remotely. The patch is named 6e29bd57972a499e9c8a81a2dbe94d0d5cf23af0. It is recommended to apply a patch to fix this issue.

• CWE-74
• CWE-89

• https://github.com/Lib0gus/JeeWMS/security/advisories/GHSA-mc7c-w398-v7xp
• https://github.com/erzhongxmu/JeeWMS/
• https://github.com/erzhongxmu/JeeWMS/commit/6e29bd57972a499e9c8a81a2dbe94d0d5cf23af0
• https://github.com/erzhongxmu/JeeWMS/pull/4
• https://vuldb.com/cve/CVE-2026-108684
• https://vuldb.com/submit/959244
• https://vuldb.com/vuln/416392
• https://vuldb.com/vuln/416392/cti

Published

Oct 11, 2026

Last Modified

Oct 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-108679JeecgBoot through 3.9.5 contains a missing authorization vul…4.3
• CVE-2026-10868A mass assignment vulnerability exists in the MISP user edit…9
• CVE-2026-108680JeecgBoot through 3.9.5 contains a missing authorization vul…4.3
• CVE-2026-108681A security flaw has been discovered in zhayujie CowAgent up …4.3
• CVE-2026-108682A weakness has been identified in zhayujie CowAgent up to 2.…5.4
• CVE-2026-108683A security vulnerability has been detected in zhayujie CowAg…4.3
• CVE-2026-108688Eladmin through 2.7 contains a missing authorization vulnera…4.3
• CVE-2026-108689Wukong AICRM through 20260610 contains a missing authorizati…5.4
• CVE-2026-108690mall4j through 4.0 contains an information disclosure vulner…4.3
• CVE-2026-108691mall4j through 4.0 contains an improper authorization vulner…5.4
• CVE-2026-1086921Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a miss…6.5
• CVE-2026-108693ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contai…7