{"uuid": "4886cf24-ccf4-4389-b14c-f6a4a2462e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8724", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116588034576668128", "content": "MEDIUM severity: CVE-2026-8724 in Dataease 2.10.20 allows SQL injection via SqlparserUtils.transFilter. Exploit requires high-priv user. No patch yet \u2014 restrict access &amp; monitor for suspicious queries. More: https://radar.offseq.com/threat/cve-2026-8724-sql-injection-in-dataease-6c315564 #OffSeq #SQLInjection #InfoSec", "creation_timestamp": "2026-05-17T04:30:45.242612Z"}