CVE-2026-45535 | DataEase up to 2.10.22 Data Visualization SqlparserUtils.handleVariableDefaultValue sql injection

July 15, 2026 Yanac

A vulnerability identified as critical has been detected in DataEase up to 2.10.22. This affects the function SqlparserUtils.handleVariableDefaultValue of the component Data Visualization. This manipulation causes sql injection.

This vulnerability is handled as CVE-2026-45535. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More