CyberRota
Back to database

CVE-2026-7678

MEDIUM · CVSS 6.3 EPSS 0.03% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-03 · Last synced: 2026-06-02

CyberRota Analysis

SQL Injection riski içeriyor. Uzaktan istismar edilebilir olabilir.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-7678
Severity
MEDIUM
CVSS
6.3
EPSS
0.03%
Java GitHub

Original NVD Description

A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/report/service/impl/GoViewDataServiceImpl.java. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.