CVE-2026-75978

Name of the Vulnerable Software and Affected Versions xianrendzw EasyReport versions prior to 2.0.17.0522 Beta

Description A remote issue exists within the QueryerFactory component in the DataSourceController.add() function of the DataSourceController.java file. Manipulating the queryerClass argument can lead to permission issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the DataSourceController.add() function to minimize the risk of exploitation.