CVE-2026-9524

creationtimestamp| type| source ---|---|--- 2026-05-26 08:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqmdajhbq2h...

CVE-2026-9524 xianrendzw EasyReport REST Endpoint execute sql injection

A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522Beta. Affected by this issue is the function execute of the component REST Endpoint. Executing a manipulation of the argument reportParams can lead to sql injection. The attack can be launched remotely. The vendor was contacted early...