← All credits

Yaqi Chao

145 vulnerability records and advisories credit this contributor.

CVE-2026-108638

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUser

CVE-2026-108633

JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add

CVE-2026-108628

JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint

CVE-2026-108623

JeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch

CVE-2026-108618

JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint

CVE-2026-108613

JeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint

CVE-2026-108608

JeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter

CVE-2026-108666

JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/deleteBatch

CVE-2026-108701

1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort

CVE-2026-108688

Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload