Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handler. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor confirms (translated from Chinese): "It should have been fixed; a batch of issues were recently resolved."
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-08 | 1 | Disclosure1 |
| 2026-05-10 | 1 | General1 |
CVE-2026-8114 A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON O… https://www.cve.org/CVERecord?id=CVE-2026-8114
Post summary
The text lists a CVE record for JeecgBoot with a brief mention of a potentially problematic file, but provides no concrete technical details, exploit information, or mitigation advice.
CVE-2026-8114 SQL Injection in JeecgBoot Up to 3.9.1 JSON Object Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8114
Post summary
The text references CVE-2026-8114, describing a SQL injection vulnerability in JeecgBoot up to 3.9.1, but lacks PoC, exploit, patch, or active exploitation details.