CVE-2026-52348

CriticalCVSS 9.8

Published: 17/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

SQL injection vulnerability in the order() method of CrudOption.java in cool-admin-java 8.0.0.

An attacker can inject SQL queries, leading to unauthorized access, modification, or deletion of database data.

Update cool-admin-java to a patched version or use parameterized SQL queries.

Original NVD description (English source)

cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.