← All credits

Yaqi Chao

145 vulnerability records and advisories credit this contributor.

CVE-2026-108639

JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/deletePhysic/{id}

CVE-2026-108634

JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission deleteBatch Endpoint

CVE-2026-108629

JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint

CVE-2026-108624

JeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endpoint

CVE-2026-108619

JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBatch Endpoint

CVE-2026-108614

JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls

CVE-2026-108609

JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter

X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

CVE-2026-100306

TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement

CVE-2026-100303

TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints