CVE ID :CVE-2026-55635 Published : July 7, 2026, 9:17 p.m. | 1 hour, 57 minutes ago Description :DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, chart quota and Y-axis filters embed attacker-controlled filter values directly into generated SQL in...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-55635 - DataEase: Authenticated SQL Injection in Chart Quota Filters

VERWANDTEARTIKEL

CVE-2026-59706 - mem0 - Server-Side Request Forgery and Plaintext API Key Exposure via Unauthenticated Config Endpoints

CVE-2026-55408 - Koodo Reader: Remote code execution via malicious epub file

CVE-2026-55418 - FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure)

CVE-2026-42958 - Use After Free in Labcenter Proteus

CVE-2026-46354 - Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

CVE-2026-49033 - Stack-Based Buffer Overflow in Labcenter Proteus