Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). Impacted is an unknown function of the file /mine/PublicReport/prinReport.html?token=java. Such manipulation of the argument comid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-2682 SQL Injection in Tsinghua Unigroup Electronic Archives System via Token Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2682
Post summary
The post announces a newly disclosed SQL Injection vulnerability (CVE-2026-2682) affecting Tsinghua Unigroup's Electronic Archives System, with the flaw located in the token parameter. No exploitation details, patches, or PoC are provided.
CVE-2026-2682 A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). Impacted is an unknown function of the file /mine/PublicReport/p… https://www.cve.org/CVERecord?id=CVE-2026-2682
Post summary
A new vulnerability, CVE-2026-2682, has been reported in the Tsinghua Unigroup Electronic Archives System affecting an unknown function, with no further technical, exploitation, or mitigation details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | unigroup | electronic_archives_system | - | - | - |