CVE-2026-108775 | erzhongxmu JEEWMS up to 2026.09.27-W39 Search Endpoint WvNoticeController.java WvNoticeController.list searchstr sql injection

October 11, 2026 Yanac

A vulnerability classified as critical has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection.

This vulnerability is referenced as CVE-2026-108775. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More