CVE-2026-1133: SQL Injection in Yonyou KSOA folder.jsp
Yonyou KSOA has a high-severity SQL injection in folder.jsp via the folderid parameter. No fix is listed, so restrict access to the application now.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Yonyou KSOA has a high-severity SQL injection in folder.jsp via the folderid parameter. No fix is listed, so restrict access to the application now.
Yonyou KSOA has a high-severity SQL injection in edit_folder.jsp via the folderid parameter. No fix is listed, so restrict access to the application now.
Yonyou KSOA has a high-severity SQL injection in save_catalog.jsp via the catalogid parameter. No fix is listed, so restrict access to the application now.
Yonyou KSOA has a high-severity SQL injection in worksadd_plan.jsp via the ID parameter. No fix is listed, so restrict access to the application now.
Yonyou KSOA has a high-severity SQL injection in worksadd.jsp via the ID parameter. No fix is listed, so restrict access to the application now.
D-Link DIR-823X firmware 250416 has a high-severity command injection in set_wifidog_settings. No fix is listed, so limit access to the router admin page.
Yonyou KSOA has a high-severity SQL injection in work_report.jsp via the ID parameter. No fix is listed, so restrict access to the application now.
Yonyou KSOA has a high-severity SQL injection in work_mod.jsp via the ID parameter. No fix is listed, so restrict access to the application now.
Yonyou KSOA has a high-severity SQL injection in work_info.jsp via the ID parameter. No fix is listed, so restrict access to the application now.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.