CVE-2026-108774
6.3 MEDIUMPublished 2026-10-12 · Updated 2026-10-14
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-74, CWE-89
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100312PoC
- HIGHCVE-2026-100314PoC
- HIGHCVE-2026-100315PoC
- HIGHCVE-2026-100739PoC
- HIGHCVE-2026-100874PoC
- HIGHCVE-2026-100875PoC
- MEDIUMCVE-2026-100887PoC
- MEDIUMCVE-2026-100894PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.