CVE-2026-108824

A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Patch name: 8509e218e6c1f0080eee9e379f269b2104785ef7. It is recommended to apply a patch to fix this issue.

• CWE-74
• CWE-89

• https://gist.github.com/k4z01/536b77dfe537e84ca1047c94cc36ef22
• https://github.com/dataease/dataease/
• https://github.com/dataease/dataease/commit/8509e218e6c1f0080eee9e379f269b2104785ef7
• https://github.com/dataease/dataease/pull/19285
• https://github.com/k4z01/DataEase-Authenticated-SQL-Injection-/blob/main/README.md
• https://vuldb.com/cve/CVE-2026-108824
• https://vuldb.com/submit/964784
• https://vuldb.com/vuln/416600
• https://vuldb.com/vuln/416600/cti

Published

Oct 12, 2026

Last Modified

Oct 12, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-108818A vulnerability was identified in agno-agi agno up to 2.7.3/…7.3
• CVE-2026-108819A security flaw has been discovered in agno-agi agno up to 3…7.3
• CVE-2026-10882Use after free in Network in Google Chrome prior to 149.0.78…8.8
• CVE-2026-108820A weakness has been identified in agno-agi agno up to 3.0.6/…6.3
• CVE-2026-108821A security vulnerability has been detected in Tencent WeKnor…6.3
• CVE-2026-108822A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. …5.3
• CVE-2026-108825A vulnerability has been found in yangzongzhuan RuoYi up to …5.4
• CVE-2026-108826A vulnerability was found in Zen Cart up to 2.2.2. This impa…7.3
• CVE-2026-10883Type Confusion in ANGLE in Google Chrome prior to 149.0.7827…8.8
• CVE-2026-108839thClaws through 0.141.0 contains a link-following vulnerabil…4.2
• CVE-2026-10884Use after free in Chromecast in Google Chrome prior to 149.0…8.3
• CVE-2026-10885Use after free in Chrome for iOS in Google Chrome on iOS pri…8.8