A vulnerability classified as critical has been found in DataEase up to 2.10.20. Affected by this vulnerability is an unknown functionality of the component API. Performing a manipulation of the argument deTableName results in sql injection.
This vulnerability is identified as CVE-2026-33121. The attack can be initiated remotely. There is not any exploit available.
It is recommended to upgrade the affected component.
