CVE-2026-124504 | erupts erupt up to 2.3.0 ReportService.java ReportService.queryBiData sort sql injection (ID 485)

November 8, 2026 Yanac

A vulnerability marked as critical has been reported in erupts erupt up to 2.3.0. Affected by this issue is the function ReportService.queryBiData of the file ReportService.java. Performing a manipulation of the argument sort results in sql injection.

This vulnerability is reported as CVE-2026-124504. The attack is possible to be carried out remotely. Moreover, an exploit is present.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More