CVE-2026-40899 | DataEase up to 2.10.20 getJdbc permissive list of allowed inputs

April 16, 2026 Yanac

A vulnerability described as problematic has been identified in DataEase up to 2.10.20. This affects the function getJdbc. Executing a manipulation can lead to permissive list of allowed inputs.

The identification of this vulnerability is CVE-2026-40899. The attack can only be executed locally. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More