A critical vulnerability in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request. This issue has a CVSS score of 9.8 and is considered CRITICAL. Defenders responsible for sso-master v1.0.0 systems, particularly those exposed to the internet, should assess their exposure and implement compensating controls. [truncated]
The CVE-2026-75334 vulnerability affects the report module in the backend of smart-web2 v1.3.1, allowing for arbitrary SQL execution. This critical vulnerability has a CVSS score of 9.8 and requires immediate attention. The sqlResource.sql parameter is stored in the t_report_sql_resource table through the ReportController.save() interface and directly embedded into Hibernate native queries without any par [truncated]
