Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the function CommonController.uploadImgByHttp/HttpFileToMultipartFileUtil.httpFileToMultipartFile/HttpFileToMultipartFileUtil.downloadImageData of the file CommonController.java of the component uploadImgByHttpEndpoint. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Upgrading the affected component is recommended. The vendor confirmed the issue and will provide a fix in the upcoming release.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7605 Server-Side Request Forgery in JeecgBoot Up To 3.9.1 CommonController https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7605
Post summary
The entry announces a Server‑Side Request Forgery flaw (CVE‑2026‑7605) affecting JeecgBoot up to version 3.9.1, but provides no evidence of exploitation, PoC, or available fixes.
🚨*CVE* CVE-2026-7605 A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the function CommonController.uploadImgByHttp/HttpFileToMultipartFileUtil.httpF… https://www.cve.org/CVERecord?id=CVE-2026-7605 ----- Traducción: CVE-2026-7605 Se … http://infoflow.cloud`
Post summary
Disclosed a security flaw in JeecgBoot affecting specific upload functions, with reference to the CVE record, but without PoC, exploit, or mitigation details.
CVE-2026-7605 A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the function CommonController.uploadImgByHttp/HttpFileToMultipartFileUtil.httpF… https://www.cve.org/CVERecord?id=CVE-2026-7605
Post summary
A new vulnerability (CVE‑2026‑7605) has been identified in JeecgBoot up to version 3.9.1, affecting a specific upload function; no PoC, exploit, or patch details are provided.