A vulnerability classified as critical was found in JeecgBoot up to 3.9.1. This impacts an unknown function of the component SysAnnouncementController. Such manipulation leads to improper authorization.
This vulnerability is uniquely identified as CVE-2026-5999. The attack can be launched remotely. Moreover, an exploit is present.
The vendor confirmed the issue and will provide a fix in the upcoming release.
