Vulnerabilities
DataEase SQL Injection CVE-2026-104143 Patched in Version 2.10.26
Authenticated users can inject SQL via custom date formats in DataEase versions prior to 2.10.26, risking full database compromise.
CVSS 8.7
Everything Patch Gazette has reported about CVSS 8.7: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
QNAP Virtualization Station patch fixes high-severity link resolution flaw
QNAP released version 4.1.1.130 to address a high-severity vulnerability that allows authenticated attackers to compromise system security through improper link resolution.