CVE-2026-7602

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Component. The manipulation of the argument ruleClass results in improper authorization. The attack may be performed from remote. The exploit has been made public and could be used. You should upgrade the affected component. The vendor confirmed the issue and will provide a fix in the upcoming release.

• CWE-266
• CWE-285

• https://github.com/jeecgboot/JeecgBoot/
• https://github.com/jeecgboot/JeecgBoot/issues/9552
• https://github.com/jeecgboot/JeecgBoot/issues/9552#issuecomment-4251391314
• https://vuldb.com/submit/805706
• https://vuldb.com/vuln/360559
• https://vuldb.com/vuln/360559/cti

Published

May 2, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76009The Next-Cart Store to WooCommerce Migration plugin for Word…8.1
• CVE-2026-7601A vulnerability has been found in Open5GS up to 2.7.6. Affec…5.3
• CVE-2026-76014A vulnerability has been found in BusyBox up to 1.30.1. This…3.3
• CVE-2026-76017Use after free in Chromoting in Google Chrome prior to 151.0…8.8
• CVE-2026-76018Privilege elevation in Import in Google Chrome prior to 151.…8.8
• CVE-2026-76019Incorrect authorization in Workers in Google Chrome prior to…8.1
• CVE-2026-76020Race condition in V8 in Google Chrome prior to 151.0.7922.17…7.5
• CVE-2026-76021Use after free in DOM in Google Chrome prior to 151.0.7922.1…8.8
• CVE-2026-76022Buffer overflow in Network in Google Chrome prior to 151.0.7…8.8
• CVE-2026-76023Improper resource control in Linux Toolkit Theming in Google…8.8
• CVE-2026-7603A vulnerability was determined in JeecgBoot up to 3.9.1. Aff…6.3
• CVE-2026-76032Pydio Cells 5.0.0 through 5.0.2 returns share-link details t…4.3