CVE-2026-2682

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). Impacted is an unknown function of the file /mine/PublicReport/prinReport.html?token=java. Such manipulation of the argument comid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
Tsinghua Unigroup	Electronic Archives System	3.2.210802(62532)

References

https://github.com/luoye197-prog/cve-ziguang-sql/blob/main/introduceBroken Link
https://github.com/luoye197-prog/cve-ziguang-sql/blob/main/poc.pyBroken Link
https://vuldb.com/?ctiid.346473Permissions Required, VDB Entry
https://vuldb.com/?id.346473Third Party Advisory, VDB Entry
https://vuldb.com/?submit.753308Third Party Advisory, VDB Entry

Timeline

Published: Feb 18, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-268246.5libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Mast CVE-2026-268255.3A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files. The issue is reachable via xls_parseWor CVE-2026-268287.5A NULL pointer dereference in the daap_reply_playlists function (src/httpd_daap.c) of owntone-server commit 3d1652d allows attackers to caus CVE-2026-268297.5A NULL pointer dereference in the safe_atou64 function (src/misc.c) of owntone-server through commit c4d57aa allows attackers to cause a Den CVE-2026-26834.3A vulnerability was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). The affected element is an unknown function of CVE-2026-268309.8pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter. The constructGetInfoCommand and con CVE-2026-268319.8textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with CVE-2026-268329.8node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR. In all versions through 2.2.1, the recognize() funct CVE-2026-268339.8thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user i CVE-2026-26849.8A vulnerability was determined in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). The impacted element is an unknown f CVE-2026-268469.8Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the Ut CVE-2026-26869.8A security vulnerability has been detected in SECCN Dingcheng G10 3.1.0.181203. This impacts the function qq of the file /cgi-bin/session_lo