CVE-2026-33122 | DataEase up to 2.10.20 API Datasource Update Process update deTableName sql injection

A vulnerability labeled as critical has been found in DataEase up to 2.10.20. Affected by this vulnerability is an unknown functionality of the file /de2api/datasource/update of the component API Datasource Update Process. Such manipulation of the argument deTableName leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-33122. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.