CVE-2026-108774 | erzhongxmu JEEWMS up to 2026.09.27-W39 MdBinController.java getbinall/getbinallagv binstore/binid/des/cengshu sql injection

October 11, 2026 Yanac

A vulnerability described as critical has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection.

The identification of this vulnerability is CVE-2026-108774. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More