https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-13T23:40:28.509979+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-108876 fkie_cve-2026-108876 2026-10-13T23:40:28.533727+00:00

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations. Low-privileged attackers can supply user ids and a tenantId parameter or X-Tenant-Id header to restore ended, pending, or refused tenant memberships to normal.

 https://db.gcve.eu/vuln/ghsa-pmhm-r7h7-cxvj GHSA-pmhm-r7h7-cxvj 2026-10-13T23:40:28.533799+00:00

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations. Low-privileged attackers can supply user ids and a tenantId parameter or X-Tenant-Id header to restore ended, pending, or refused tenant memberships to normal.