Advisories · Technology

xianrendzw EasyReport.

Every CVE that names xianrendzw EasyReport among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75979 CVE record

CVSS 5.3 Medium

xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engine
- xianrendzw EasyReport
- Code injection
- CWE-791
Not analysed yet 19 Aug 2026
CVE-2026-75978 CVE record

CVSS 5.3 Medium

xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission
- xianrendzw EasyReport
- Privilege escalation
- CWE-275
Not analysed yet 19 Aug 2026
CVE-2026-75876 CVE record

CVSS 5.3 Medium

xianrendzw EasyReport Move Operations ModuleController.java sql injection
- xianrendzw EasyReport
- Other injection
- SQL injection
Not analysed yet 18 Aug 2026
CVE-2026-9524 CVE record

CVSS 5.3 Medium

xianrendzw EasyReport REST Endpoint execute sql injection
- xianrendzw EasyReport
- Other injection
- SQL injection
Not analysed yet 26 May 2026