Security Advisory

CVE-2026-19000

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-06 05:15:08
Last updated 2026-08-06 13:16:06
Assigner VulDB
CVSS score not scored
State PUBLISHED

Description

A vulnerability was identified in JeecgBoot up to 3.9.2. The affected element is an unknown function of the file /airag/chat/send of the component Anonymous Chat Attachment Parser. The manipulation leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used. A fix is planned for the upcoming release.