A vulnerability described as problematic has been identified in DataEase up to 2.10.20. This affects the function
getJdbc. Executing a manipulation can lead to permissive list of allowed inputs.
The identification of this vulnerability is CVE-2026-40899. The attack can only be executed locally. There is no exploit available.
Upgrading the affected component is recommended.
