Vulnerabilities
DataEase SQL Injection CVE-2026-104141 Patched in Version 2.10.26
A high-severity SQL injection flaw in DataEase allows authenticated users to alter generated SQL via crafted metadata inputs.
CVE-2026-104143
Everything Patch Gazette has reported about CVE-2026-104143: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
DataEase SQL Injection CVE-2026-104143 Patched in Version 2.10.26
Authenticated users can inject SQL via custom date formats in DataEase versions prior to 2.10.26, risking full database compromise.