All 4 CVE vulnerabilities found in EasyReport, with AI-generated Chinese analysis, references, and POCs.
Vendor: xianrendzw
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-75979 | xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engine CWE-1336 | 6.3 | Medium | 2026-08-19 |
| CVE-2026-75978 | xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission CWE-275 | 6.3 | Medium | 2026-08-19 |
| CVE-2026-75876 | xianrendzw EasyReport Move Operations ModuleController.java sql injection CWE-89 | 6.3 | Medium | 2026-08-18 |
| CVE-2026-9524 | xianrendzw EasyReport REST Endpoint execute sql injection CWE-89 | 6.3 | Medium | 2026-05-26 |
All 4 known CVE vulnerabilities affecting EasyReport with full Chinese analysis, references, and POCs where available.