erupt
- Software type
- Software application
- Total vulnerabilities (90 days)
- 2
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/09/2026, erupt recorded 2 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of erupt and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-124504erupts erupt ReportService.java ReportService.queryBiData sql injectionCVE-2026-111390Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table APICVE-2026-4594erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injectionCVE-2026-4593erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-124504erupts erupt ReportService.java ReportService.queryBiData sql injection | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityMedium |
CVE-2026-111390Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API | Exploitation statusActively exploited | FixYes | Published10/16/2026 | SeverityMedium |
CVE-2026-4594erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injection | Exploitation statusActively exploited | FixNo | Published03/23/2026 | SeverityMedium |
CVE-2026-4593erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection | Exploitation statusActively exploited | FixNo | Published03/23/2026 | SeverityMedium |
4 Results | Page 1 of 1