CVE-2026-7678 — YunaiV yudao-cloud: SQL injection in GoViewDataServiceImpl.java

A SQL injection vulnerability was identified in YunaiV yudao-cloud up to version 2026.01. It affects the getDataBySQL function in GoViewDataServiceImpl.java. The attack can be launched remotely, and a public exploit is available and might be used.