Refine your search
2 vulnerabilities found for .NET Framework by Furion
CVE-2026-108570 (GCVE-0-2026-108570)
Vulnerability from cvelistv5
Published
2026-10-11 10:30
Modified
2026-10-13 13:02
Severity ?
2.1 (Low) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
6.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
6.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
6.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
VLAI Severity ?
EPSS score ?
CWE
Summary
A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special elements used in a template engine. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Furion | .NET Framework |
Version: 4.9.9.0 Version: 4.9.9.1 Version: 4.9.9.2 Version: 4.9.9.3 Version: 4.9.9.4 Version: 4.9.9.5 Version: 4.9.9.6 Version: 4.9.9.7 Version: 4.9.9.8 Version: 4.9.9.9 Version: 4.9.9.10 Version: 4.9.9.11 Version: 4.9.9.12 Version: 4.9.9.13 Version: 4.9.9.14 Version: 4.9.9.15 Version: 4.9.9.16 Version: 4.9.9.17 Version: 4.9.9.18 Version: 4.9.9.19 Version: 4.9.9.20 Version: 4.9.9.21 Version: 4.9.9.22 Version: 4.9.9.23 Version: 4.9.9.24 Version: 4.9.9.25 Version: 4.9.9.26 Version: 4.9.9.27 Version: 4.9.9.28 Version: 4.9.9.29 Version: 4.9.9.30 Version: 4.9.9.31 Version: 4.9.9.32 Version: 4.9.9.33 Version: 4.9.9.34 Version: 4.9.9.35 Version: 4.9.9.36 Version: 4.9.9.37 Version: 4.9.9.38 Version: 4.9.9.39 Version: 4.9.9.40 Version: 4.9.9.41 Version: 4.9.9.42 Version: 4.9.9.43 Version: 4.9.9.44 Version: 4.9.9.45 Version: 4.9.9.46 Version: 4.9.9.47 Version: 4.9.9.48 Version: 4.9.9.49 Version: 4.9.9.50 Version: 4.9.9.51 Version: 4.9.9.52 Version: 4.9.9.53 Version: 4.9.9.54 Version: 4.9.9.55 Version: 4.9.9.56 Version: 4.9.9.57 Version: 4.9.9.58 Version: 4.9.9.59 Version: 4.9.9.60 Version: 4.9.9.61 Version: 4.9.9.62 Version: 4.9.9.63 Version: 4.9.9.64 Version: 4.9.9.65 Version: 4.9.9.66 Version: 4.9.9.67 Version: 4.9.9.68 Version: 4.9.9.69 Version: 4.9.9.70 Version: 4.9.9.71 Version: 4.9.9.72 Version: 4.9.9.73 Version: 4.9.9.74 Version: 4.9.9.75 Version: 4.9.9.76 Version: 4.9.9.77 Version: 4.9.9.78 Version: 4.9.9.79 Version: 4.9.9.80 Version: 4.9.9.81 Version: 4.9.9.82 Version: 4.9.9.83 Version: 4.9.9.84 Version: 4.9.9.85 Version: 4.9.9.86 Version: 4.9.9.87 Version: 4.9.9.88 Version: 4.9.9.89 Version: 4.9.9.90 Version: 4.9.9.91 Version: 4.9.9.92 Version: 4.9.9.93 Version: 4.9.9.94 Version: 4.9.9.95 cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108570",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T13:02:01.242393Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T13:02:30.659Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://vuldb.com/submit/954714"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:*"
],
"modules": [
"View Engine"
],
"product": ".NET Framework",
"vendor": "Furion",
"versions": [
{
"status": "affected",
"version": "4.9.9.0"
},
{
"status": "affected",
"version": "4.9.9.1"
},
{
"status": "affected",
"version": "4.9.9.2"
},
{
"status": "affected",
"version": "4.9.9.3"
},
{
"status": "affected",
"version": "4.9.9.4"
},
{
"status": "affected",
"version": "4.9.9.5"
},
{
"status": "affected",
"version": "4.9.9.6"
},
{
"status": "affected",
"version": "4.9.9.7"
},
{
"status": "affected",
"version": "4.9.9.8"
},
{
"status": "affected",
"version": "4.9.9.9"
},
{
"status": "affected",
"version": "4.9.9.10"
},
{
"status": "affected",
"version": "4.9.9.11"
},
{
"status": "affected",
"version": "4.9.9.12"
},
{
"status": "affected",
"version": "4.9.9.13"
},
{
"status": "affected",
"version": "4.9.9.14"
},
{
"status": "affected",
"version": "4.9.9.15"
},
{
"status": "affected",
"version": "4.9.9.16"
},
{
"status": "affected",
"version": "4.9.9.17"
},
{
"status": "affected",
"version": "4.9.9.18"
},
{
"status": "affected",
"version": "4.9.9.19"
},
{
"status": "affected",
"version": "4.9.9.20"
},
{
"status": "affected",
"version": "4.9.9.21"
},
{
"status": "affected",
"version": "4.9.9.22"
},
{
"status": "affected",
"version": "4.9.9.23"
},
{
"status": "affected",
"version": "4.9.9.24"
},
{
"status": "affected",
"version": "4.9.9.25"
},
{
"status": "affected",
"version": "4.9.9.26"
},
{
"status": "affected",
"version": "4.9.9.27"
},
{
"status": "affected",
"version": "4.9.9.28"
},
{
"status": "affected",
"version": "4.9.9.29"
},
{
"status": "affected",
"version": "4.9.9.30"
},
{
"status": "affected",
"version": "4.9.9.31"
},
{
"status": "affected",
"version": "4.9.9.32"
},
{
"status": "affected",
"version": "4.9.9.33"
},
{
"status": "affected",
"version": "4.9.9.34"
},
{
"status": "affected",
"version": "4.9.9.35"
},
{
"status": "affected",
"version": "4.9.9.36"
},
{
"status": "affected",
"version": "4.9.9.37"
},
{
"status": "affected",
"version": "4.9.9.38"
},
{
"status": "affected",
"version": "4.9.9.39"
},
{
"status": "affected",
"version": "4.9.9.40"
},
{
"status": "affected",
"version": "4.9.9.41"
},
{
"status": "affected",
"version": "4.9.9.42"
},
{
"status": "affected",
"version": "4.9.9.43"
},
{
"status": "affected",
"version": "4.9.9.44"
},
{
"status": "affected",
"version": "4.9.9.45"
},
{
"status": "affected",
"version": "4.9.9.46"
},
{
"status": "affected",
"version": "4.9.9.47"
},
{
"status": "affected",
"version": "4.9.9.48"
},
{
"status": "affected",
"version": "4.9.9.49"
},
{
"status": "affected",
"version": "4.9.9.50"
},
{
"status": "affected",
"version": "4.9.9.51"
},
{
"status": "affected",
"version": "4.9.9.52"
},
{
"status": "affected",
"version": "4.9.9.53"
},
{
"status": "affected",
"version": "4.9.9.54"
},
{
"status": "affected",
"version": "4.9.9.55"
},
{
"status": "affected",
"version": "4.9.9.56"
},
{
"status": "affected",
"version": "4.9.9.57"
},
{
"status": "affected",
"version": "4.9.9.58"
},
{
"status": "affected",
"version": "4.9.9.59"
},
{
"status": "affected",
"version": "4.9.9.60"
},
{
"status": "affected",
"version": "4.9.9.61"
},
{
"status": "affected",
"version": "4.9.9.62"
},
{
"status": "affected",
"version": "4.9.9.63"
},
{
"status": "affected",
"version": "4.9.9.64"
},
{
"status": "affected",
"version": "4.9.9.65"
},
{
"status": "affected",
"version": "4.9.9.66"
},
{
"status": "affected",
"version": "4.9.9.67"
},
{
"status": "affected",
"version": "4.9.9.68"
},
{
"status": "affected",
"version": "4.9.9.69"
},
{
"status": "affected",
"version": "4.9.9.70"
},
{
"status": "affected",
"version": "4.9.9.71"
},
{
"status": "affected",
"version": "4.9.9.72"
},
{
"status": "affected",
"version": "4.9.9.73"
},
{
"status": "affected",
"version": "4.9.9.74"
},
{
"status": "affected",
"version": "4.9.9.75"
},
{
"status": "affected",
"version": "4.9.9.76"
},
{
"status": "affected",
"version": "4.9.9.77"
},
{
"status": "affected",
"version": "4.9.9.78"
},
{
"status": "affected",
"version": "4.9.9.79"
},
{
"status": "affected",
"version": "4.9.9.80"
},
{
"status": "affected",
"version": "4.9.9.81"
},
{
"status": "affected",
"version": "4.9.9.82"
},
{
"status": "affected",
"version": "4.9.9.83"
},
{
"status": "affected",
"version": "4.9.9.84"
},
{
"status": "affected",
"version": "4.9.9.85"
},
{
"status": "affected",
"version": "4.9.9.86"
},
{
"status": "affected",
"version": "4.9.9.87"
},
{
"status": "affected",
"version": "4.9.9.88"
},
{
"status": "affected",
"version": "4.9.9.89"
},
{
"status": "affected",
"version": "4.9.9.90"
},
{
"status": "affected",
"version": "4.9.9.91"
},
{
"status": "affected",
"version": "4.9.9.92"
},
{
"status": "affected",
"version": "4.9.9.93"
},
{
"status": "affected",
"version": "4.9.9.94"
},
{
"status": "affected",
"version": "4.9.9.95"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "BlackSpdier (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special elements used in a template engine. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1336",
"description": "Improper Neutralization of Special Elements Used in a Template Engine",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-791",
"description": "Incomplete Filtering of Special Elements",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T10:30:14.538Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-416227 | Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/416227"
},
{
"name": "VDB-416227 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/416227/cti"
},
{
"name": "CVE-2026-108570 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-108570"
},
{
"name": "Submit #954714 | \u767e\u7b7e\u79d1\u6280\uff08\u5e7f\u4e1c\uff09\u6709\u9650\u516c\u53f8 Furion v4 RCE",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/954714"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-10T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-10T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-10T17:19:35.000Z",
"value": "VulDB entry last update"
}
],
"title": "Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-108570",
"datePublished": "2026-10-11T10:30:14.538Z",
"dateReserved": "2026-10-10T15:14:25.303Z",
"dateUpdated": "2026-10-13T13:02:30.659Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108569 (GCVE-0-2026-108569)
Vulnerability from cvelistv5
Published
2026-10-11 10:15
Modified
2026-10-14 02:50
Severity ?
2.1 (Low) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
6.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
6.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
6.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
6.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
VLAI Severity ?
EPSS score ?
Summary
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Furion | .NET Framework |
Version: 4.9.9.0 Version: 4.9.9.1 Version: 4.9.9.2 Version: 4.9.9.3 Version: 4.9.9.4 Version: 4.9.9.5 Version: 4.9.9.6 Version: 4.9.9.7 Version: 4.9.9.8 Version: 4.9.9.9 Version: 4.9.9.10 Version: 4.9.9.11 Version: 4.9.9.12 Version: 4.9.9.13 Version: 4.9.9.14 Version: 4.9.9.15 Version: 4.9.9.16 Version: 4.9.9.17 Version: 4.9.9.18 Version: 4.9.9.19 Version: 4.9.9.20 Version: 4.9.9.21 Version: 4.9.9.22 Version: 4.9.9.23 Version: 4.9.9.24 Version: 4.9.9.25 Version: 4.9.9.26 Version: 4.9.9.27 Version: 4.9.9.28 Version: 4.9.9.29 Version: 4.9.9.30 Version: 4.9.9.31 Version: 4.9.9.32 Version: 4.9.9.33 Version: 4.9.9.34 Version: 4.9.9.35 Version: 4.9.9.36 Version: 4.9.9.37 Version: 4.9.9.38 Version: 4.9.9.39 Version: 4.9.9.40 Version: 4.9.9.41 Version: 4.9.9.42 Version: 4.9.9.43 Version: 4.9.9.44 Version: 4.9.9.45 Version: 4.9.9.46 Version: 4.9.9.47 Version: 4.9.9.48 Version: 4.9.9.49 Version: 4.9.9.50 Version: 4.9.9.51 Version: 4.9.9.52 Version: 4.9.9.53 Version: 4.9.9.54 Version: 4.9.9.55 Version: 4.9.9.56 Version: 4.9.9.57 Version: 4.9.9.58 Version: 4.9.9.59 Version: 4.9.9.60 Version: 4.9.9.61 Version: 4.9.9.62 Version: 4.9.9.63 Version: 4.9.9.64 Version: 4.9.9.65 Version: 4.9.9.66 Version: 4.9.9.67 Version: 4.9.9.68 Version: 4.9.9.69 Version: 4.9.9.70 Version: 4.9.9.71 Version: 4.9.9.72 Version: 4.9.9.73 Version: 4.9.9.74 Version: 4.9.9.75 Version: 4.9.9.76 Version: 4.9.9.77 Version: 4.9.9.78 Version: 4.9.9.79 Version: 4.9.9.80 Version: 4.9.9.81 Version: 4.9.9.82 Version: 4.9.9.83 Version: 4.9.9.84 Version: 4.9.9.85 Version: 4.9.9.86 Version: 4.9.9.87 Version: 4.9.9.88 Version: 4.9.9.89 Version: 4.9.9.90 Version: 4.9.9.91 Version: 4.9.9.92 cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108569",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-14T02:50:16.181678Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-14T02:50:25.550Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:*"
],
"product": ".NET Framework",
"vendor": "Furion",
"versions": [
{
"status": "affected",
"version": "4.9.9.0"
},
{
"status": "affected",
"version": "4.9.9.1"
},
{
"status": "affected",
"version": "4.9.9.2"
},
{
"status": "affected",
"version": "4.9.9.3"
},
{
"status": "affected",
"version": "4.9.9.4"
},
{
"status": "affected",
"version": "4.9.9.5"
},
{
"status": "affected",
"version": "4.9.9.6"
},
{
"status": "affected",
"version": "4.9.9.7"
},
{
"status": "affected",
"version": "4.9.9.8"
},
{
"status": "affected",
"version": "4.9.9.9"
},
{
"status": "affected",
"version": "4.9.9.10"
},
{
"status": "affected",
"version": "4.9.9.11"
},
{
"status": "affected",
"version": "4.9.9.12"
},
{
"status": "affected",
"version": "4.9.9.13"
},
{
"status": "affected",
"version": "4.9.9.14"
},
{
"status": "affected",
"version": "4.9.9.15"
},
{
"status": "affected",
"version": "4.9.9.16"
},
{
"status": "affected",
"version": "4.9.9.17"
},
{
"status": "affected",
"version": "4.9.9.18"
},
{
"status": "affected",
"version": "4.9.9.19"
},
{
"status": "affected",
"version": "4.9.9.20"
},
{
"status": "affected",
"version": "4.9.9.21"
},
{
"status": "affected",
"version": "4.9.9.22"
},
{
"status": "affected",
"version": "4.9.9.23"
},
{
"status": "affected",
"version": "4.9.9.24"
},
{
"status": "affected",
"version": "4.9.9.25"
},
{
"status": "affected",
"version": "4.9.9.26"
},
{
"status": "affected",
"version": "4.9.9.27"
},
{
"status": "affected",
"version": "4.9.9.28"
},
{
"status": "affected",
"version": "4.9.9.29"
},
{
"status": "affected",
"version": "4.9.9.30"
},
{
"status": "affected",
"version": "4.9.9.31"
},
{
"status": "affected",
"version": "4.9.9.32"
},
{
"status": "affected",
"version": "4.9.9.33"
},
{
"status": "affected",
"version": "4.9.9.34"
},
{
"status": "affected",
"version": "4.9.9.35"
},
{
"status": "affected",
"version": "4.9.9.36"
},
{
"status": "affected",
"version": "4.9.9.37"
},
{
"status": "affected",
"version": "4.9.9.38"
},
{
"status": "affected",
"version": "4.9.9.39"
},
{
"status": "affected",
"version": "4.9.9.40"
},
{
"status": "affected",
"version": "4.9.9.41"
},
{
"status": "affected",
"version": "4.9.9.42"
},
{
"status": "affected",
"version": "4.9.9.43"
},
{
"status": "affected",
"version": "4.9.9.44"
},
{
"status": "affected",
"version": "4.9.9.45"
},
{
"status": "affected",
"version": "4.9.9.46"
},
{
"status": "affected",
"version": "4.9.9.47"
},
{
"status": "affected",
"version": "4.9.9.48"
},
{
"status": "affected",
"version": "4.9.9.49"
},
{
"status": "affected",
"version": "4.9.9.50"
},
{
"status": "affected",
"version": "4.9.9.51"
},
{
"status": "affected",
"version": "4.9.9.52"
},
{
"status": "affected",
"version": "4.9.9.53"
},
{
"status": "affected",
"version": "4.9.9.54"
},
{
"status": "affected",
"version": "4.9.9.55"
},
{
"status": "affected",
"version": "4.9.9.56"
},
{
"status": "affected",
"version": "4.9.9.57"
},
{
"status": "affected",
"version": "4.9.9.58"
},
{
"status": "affected",
"version": "4.9.9.59"
},
{
"status": "affected",
"version": "4.9.9.60"
},
{
"status": "affected",
"version": "4.9.9.61"
},
{
"status": "affected",
"version": "4.9.9.62"
},
{
"status": "affected",
"version": "4.9.9.63"
},
{
"status": "affected",
"version": "4.9.9.64"
},
{
"status": "affected",
"version": "4.9.9.65"
},
{
"status": "affected",
"version": "4.9.9.66"
},
{
"status": "affected",
"version": "4.9.9.67"
},
{
"status": "affected",
"version": "4.9.9.68"
},
{
"status": "affected",
"version": "4.9.9.69"
},
{
"status": "affected",
"version": "4.9.9.70"
},
{
"status": "affected",
"version": "4.9.9.71"
},
{
"status": "affected",
"version": "4.9.9.72"
},
{
"status": "affected",
"version": "4.9.9.73"
},
{
"status": "affected",
"version": "4.9.9.74"
},
{
"status": "affected",
"version": "4.9.9.75"
},
{
"status": "affected",
"version": "4.9.9.76"
},
{
"status": "affected",
"version": "4.9.9.77"
},
{
"status": "affected",
"version": "4.9.9.78"
},
{
"status": "affected",
"version": "4.9.9.79"
},
{
"status": "affected",
"version": "4.9.9.80"
},
{
"status": "affected",
"version": "4.9.9.81"
},
{
"status": "affected",
"version": "4.9.9.82"
},
{
"status": "affected",
"version": "4.9.9.83"
},
{
"status": "affected",
"version": "4.9.9.84"
},
{
"status": "affected",
"version": "4.9.9.85"
},
{
"status": "affected",
"version": "4.9.9.86"
},
{
"status": "affected",
"version": "4.9.9.87"
},
{
"status": "affected",
"version": "4.9.9.88"
},
{
"status": "affected",
"version": "4.9.9.89"
},
{
"status": "affected",
"version": "4.9.9.90"
},
{
"status": "affected",
"version": "4.9.9.91"
},
{
"status": "affected",
"version": "4.9.9.92"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "BlackSpdier (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T10:15:09.779Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-416226 | Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/416226"
},
{
"name": "VDB-416226 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/416226/cti"
},
{
"name": "CVE-2026-108569 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-108569"
},
{
"name": "Submit #954713 | \u767e\u7b7e\u79d1\u6280\uff08\u5e7f\u4e1c\uff09\u6709\u9650\u516c\u53f8\u82f1\u6587\u540d Furion v4 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/954713"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-10T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-10T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-10T17:19:31.000Z",
"value": "VulDB entry last update"
}
],
"title": "Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-108569",
"datePublished": "2026-10-11T10:15:09.779Z",
"dateReserved": "2026-10-10T15:14:21.530Z",
"dateUpdated": "2026-10-14T02:50:25.550Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}