CVE-2026-124557
Last modified
CVE-2026-124557 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. Impacted is the function DbMybatisGenerateServiceImpl.generateClass of the file DbMybatisGenerateServiceImpl.java of the component Class Generator. EPSS estimates a 0.50% chance of exploitation in the next 30 days.
Description
A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. Impacted is the function DbMybatisGenerateServiceImpl.generateClass of the file DbMybatisGenerateServiceImpl.java of the component Class Generator. The manipulation of the argument tableName results in path traversal. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-124557?
How severe is CVE-2026-124557?
How do I fix CVE-2026-124557?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-124551ClassroomIO through 1.0.0 contains an authorization bypass v…5.3
- CVE-2026-124552Webmin through 2.670 contains a stored cross-site scripting …4.8
- CVE-2026-124553BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaus…7.5
- CVE-2026-124554A security flaw has been discovered in JeecgBoot 3.9.5. This…7.3
- CVE-2026-124555A weakness has been identified in JeecgBoot 3.9.5. This vuln…6.3
- CVE-2026-124556A security vulnerability has been detected in kekingcn kkFil…4.3
- CVE-2026-124558A vulnerability has been found in DataLinkDC Dinky up to 1.2…7.3
- CVE-2026-12456Inappropriate implementation in Extensions in Google Chrome …4.2
- CVE-2026-124560A vulnerability was found in D-Link DIR-878 1.20B05. This af…9.8
- CVE-2026-124561A vulnerability was determined in D-Link DIR-878 1.20B05. Th…7.5
- CVE-2026-124562A vulnerability was identified in D-Link DIR-878 1.20B05. Af…7.5
- CVE-2026-124563A security flaw has been discovered in D-Link DIR-878 1.20B0…7.5
Are you affected by CVE-2026-124557?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST