CVE-2026-82629

MEDIUM 4.7

jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload

CVSS Score

4.7

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the component doUpload Endpoint. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-434 CWE-284
Vendor	jeecgboot
Product	jeewx-boot
Published	Aug 31, 2026

Stay Ahead of the Next One

Get instant alerts for jeecgboot jeewx-boot

Be the first to know when new medium vulnerabilities affecting jeecgboot jeewx-boot are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

jeecgboot / jeewx-boot

641ab52c3e1845fec39996d7794c33fb40dad1dd

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/397127 vuldb.com: https://vuldb.com/vuln/397127/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82629 vuldb.com: https://vuldb.com/submit/893778 github.com: https://github.com/jeecgboot/jeewx-boot/issues/48 github.com: https://github.com/jeecgboot/jeewx-boot/

Credits

🔍 CyanM0un (VulDB User) VulDB CNA Team