High severity · published Oct 4, 2026
CVE-2026-105158
RainyGao DocSys Database Management BaseController.java BaseController.createDBForMysql sql injection
7.3
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
DocSys · RainyGao
2.02.0; 2.02.1; 2.02.2; 2.02.3; 2.02.4; 2.02.5; +34 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-105158
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-105158
vdb-entry
https://vuldb.com/vuln/413377
signature
https://vuldb.com/vuln/413377/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-105158
third-party-advisory
https://vuldb.com/submit/953425
exploit
https://gitee.com/RainyGao/DocSys/issues/IK8NEU
product
https://gitee.com/RainyGao/DocSys/
More from DocSys
9.8
CVE-2025-15493
RainyGao DocSys ReposAuthMapper.xml sql injection
9.8
CVE-2025-11630
RainyGao DocSys File Upload uploadDoc.do updateRealDoc path traversal
9.8
CVE-2025-11629
RainyGao DocSys getUserList.do getUserList sql injection
9.1
CVE-2025-11631
RainyGao DocSys deleteDoc.do path traversal
8.8
CVE-2025-15494
RainyGao DocSys UserMapper.xml sql injection