
Vulnerabilities
DataEase SQL Injection CVE-2026-104141 Patched in Version 2.10.26
A high-severity SQL injection flaw in DataEase allows authenticated users to alter generated SQL via crafted metadata inputs.
Everything Patch Gazette has reported about DataEase: 2 stories, newest first. Part of our Vulnerabilities coverage.

A high-severity SQL injection flaw in DataEase allows authenticated users to alter generated SQL via crafted metadata inputs.

Authenticated users can inject SQL via custom date formats in DataEase versions prior to 2.10.26, risking full database compromise.