CRITICALVulnerability

CVE-2026-67926

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module

Properties

severity
CRITICAL
score
9.8
epss_score
0.00589
cve_id
CVE-2026-67926
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
published_at
2026-08-17T21:16:47.507
last_modified
2026-08-31T20:12:02.273
epss_percentile
0.45917

Related Entities (3)

ENRICHED_BY (1)

[Source]FIRST EPSS

HAS_WEAKNESS (1)

[Weakness]Improper Control of Generation of Code ('Code Injection')

DESCRIBED_BY (1)

[Source]NVD

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-67926 — Ninja Signal Threat Intelligence | Ninja Signal