DataEase SQLBot

• CVE-2026-121453 Low 2.7 SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint 0.4%
• CVE-2026-93660 Medium 6.5 SQLBot through 1.10.1 Improper Access Control via Dashboard Update 0.4%
• CVE-2026-53557 High 7.7 SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution 0.3%
• CVE-2026-53555 Medium 5.1 Stored XSS via SVG Upload 0.5%
• CVE-2026-53556 Medium 6.0 SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read 0.5%
• CVE-2026-53554 High 7.3 SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing 0.4%
• CVE-2026-72743 Medium 5.4 SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html 0.3%
• CVE-2026-42463 High 8.6 SQLBot: Unauthorized Access Vulnerability 0.2%
• CVE-2026-33324 Critical 9.4 SQLBot prompt injection allows arbitrary SQL execution and remote code execution 0.6%
• CVE-2026-5417 Medium 4.7 Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery 0.2%
• CVE-2026-32950 High 8.6 SQLBot: RCE via SQL Injection in Excel Upload Endpoint 0.9%
• CVE-2026-32949 High 8.7 SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL 0.5%
• CVE-2026-32622 High 8.6 SQLBot: Remote Code Execution via Terminology Poisoning 0.6%
• CVE-2025-15598 Low 3.7 Dataease SQLBot JWT Token auth.py validateEmbedded signature verification 0.2%
• CVE-2025-15597 Medium 6.3 Dataease SQLBot API Endpoint assistant.py access control 0.6%
• CVE-2025-69285 High 7.7 SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability 0.5%