erupts

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

erupts records in CISA KEV

No erupts vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-03998 CVE-2026-4594 · GHSA-8fx2-x558-87xq

erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injection

HIGH 70

A vulnerability has been found in erupts erupt up to 1.13.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00264 Published 2026-03-23 No fix listed CWE-564

TI-2026-75289 CVE-2026-111390 · GHSA-qh8g-m9r5-r3mw

HQL injection in Erupt Data Table API lets users read other entities

MEDIUM 60

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{e…

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00357 Published 2026-10-16 No fix listed CWE-564

TI-2026-03997 CVE-2026-4593 · GHSA-473j-28g3-gv2f

erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection

MEDIUM 57

A flaw has been found in erupts erupt bis 1.13.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.002 Published 2026-03-23 No fix listed CWE-564

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0