Is CVE-2026-108611 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108611?

CVE-2026-108611 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-108611

Description

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with an id parameter to permanently remove any template from the shared library.