CVE-2022-36606: Yimihome Ywoa

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.

Affected products

• Yimihome Ywoa: before 6.1 (fixed in 6.1)

Published 2022-08-19. Last modified 2026-06-17.