CVE-2026-111390

🗓️ 16 Oct 2026 11:38:02Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 30 Views🌐 WEB

Authenticated HQL injection in Erupt through 2.3.0 Data Table API bypasses data filters.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-111390	16 Oct 202611:47	–	circl
CNNVD	YuePeng has a SQL injection vulnerability	15 Oct 202616:00	–	cnnvd
Cvelist	CVE-2026-111390 Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API	16 Oct 202611:38	–	cvelist
EUVD	EUVD-2026-102844	16 Oct 202611:38	–	euvd
Mend	CVE-2026-111390	16 Oct 202611:38	–	mend
NVD	CVE-2026-111390	16 Oct 202612:16	–	nvd
osv_cve	CVE-2026-111390 Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API	16 Oct 202611:38	–	osv_cve
Positive Technologies	PT-2026-115583	16 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-111390: SQL Injection: Hibernate	16 Oct 202600:00	–	rapid7
Vulnrichment	CVE-2026-111390 Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API	16 Oct 202611:38	–	vulnrichment

Vulners

CNA

Node

erupt eruptRange≤2.3.0

[
  {
    "vendor": "erupts",
    "product": "erupt",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "lessThanOrEqual": "2.3.0",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "packageURL": "pkg:maven/xyz.erupt/erupt-core",
    "repo": "https://github.com/erupts/erupt"
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/erupt-through-2.3.0-hql-injection-via-linktreeval-in-data-table-api
github	www.github.com/erupts/erupt/blob/2.3.0/erupt-core/src/main/java/xyz/erupt/core/service/EruptService.java
github	www.github.com/erupts/erupt/blob/2.3.0/erupt-core/src/main/java/xyz/erupt/core/util/TypeUtil.java
github	www.github.com/erupts/erupt/blob/2.3.0/erupt-data/erupt-data-jpa/src/main/java/xyz/erupt/jpa/dao/EruptJpaUtils.java
github	www.github.com/erupts/erupt
hackmd	www.hackmd.io/m0EK1XcGQfua6QHIXXNqMQ

Parameter	Position	Path	Description	CWE
linkTreeVal	request body	/erupt-api/data/table/{erupt}	HQL injection vulnerability in the linkTreeVal parameter allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes.	CWE-564

21 Oct 2026 03:17Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.3

CVSS 46

EPSS0.00357

SSVC

CWE-564