CVE-2026-108824 | DataEase up to 3.0.0 Utils.java Utils.buildCalcField calculated field sql injection

October 11, 2026 Yanac

A vulnerability, which was classified as critical, has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection.

The identification of this vulnerability is CVE-2026-108824. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More