A vulnerability described as critical has been identified in DataEase up to 2.10.22. This affects the function
executeQuery of the file /de2api/datasetData/previewSql of the component SQL Preview. The manipulation results in sql injection.
This vulnerability was named CVE-2026-50030. The attack may be performed from remote. There is no available exploit.