MegaEase vulnerabilities
We track 2 vulnerabilities in MegaEase products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 31, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest MegaEase vulnerabilities
- 7.3 High severity
EaseProbe: Incorrect Privilege Assignment
A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper access controls. The atta
- 9.8 Critical severity
easeprobe: Improper Neutralization of Special Elements used in an SQL Command
EaseProbe is a tool that can do health/status checking. An SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0.