CVE-2026-75876

Name of the Vulnerable Software and Affected Versions xianrendzw EasyReport versions prior to 2.0.17.0522 Beta

Description A remote SQL injection exists within the Move Operations component, specifically in the ModuleController.java file. The issue occurs when the sourcePath argument is manipulated, allowing an attacker to execute arbitrary SQL commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the sourcePath argument within the Move Operations component to minimize the risk of exploitation.