Search
Find a vulnerability
Search criteria
4 vulnerabilities by Furion
CVE-2026-108570 (GCVE-0-2026-108570)
Vulnerability from nvd – Published: 2026-10-11 10:30 – Updated: 2026-10-13 13:02
VLAI
EPSS
VEX
Title
Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine
Summary
A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special elements used in a template engine. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 13:02 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/416227 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/416227/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-108570 | third-party-advisory |
| https://vuldb.com/submit/954714 | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Furion | .NET Framework |
Affected:
4.9.9.0
Affected: 4.9.9.1 Affected: 4.9.9.2 Affected: 4.9.9.3 Affected: 4.9.9.4 Affected: 4.9.9.5 Affected: 4.9.9.6 Affected: 4.9.9.7 Affected: 4.9.9.8 Affected: 4.9.9.9 Affected: 4.9.9.10 Affected: 4.9.9.11 Affected: 4.9.9.12 Affected: 4.9.9.13 Affected: 4.9.9.14 Affected: 4.9.9.15 Affected: 4.9.9.16 Affected: 4.9.9.17 Affected: 4.9.9.18 Affected: 4.9.9.19 Affected: 4.9.9.20 Affected: 4.9.9.21 Affected: 4.9.9.22 Affected: 4.9.9.23 Affected: 4.9.9.24 Affected: 4.9.9.25 Affected: 4.9.9.26 Affected: 4.9.9.27 Affected: 4.9.9.28 Affected: 4.9.9.29 Affected: 4.9.9.30 Affected: 4.9.9.31 Affected: 4.9.9.32 Affected: 4.9.9.33 Affected: 4.9.9.34 Affected: 4.9.9.35 Affected: 4.9.9.36 Affected: 4.9.9.37 Affected: 4.9.9.38 Affected: 4.9.9.39 Affected: 4.9.9.40 Affected: 4.9.9.41 Affected: 4.9.9.42 Affected: 4.9.9.43 Affected: 4.9.9.44 Affected: 4.9.9.45 Affected: 4.9.9.46 Affected: 4.9.9.47 Affected: 4.9.9.48 Affected: 4.9.9.49 Affected: 4.9.9.50 Affected: 4.9.9.51 Affected: 4.9.9.52 Affected: 4.9.9.53 Affected: 4.9.9.54 Affected: 4.9.9.55 Affected: 4.9.9.56 Affected: 4.9.9.57 Affected: 4.9.9.58 Affected: 4.9.9.59 Affected: 4.9.9.60 Affected: 4.9.9.61 Affected: 4.9.9.62 Affected: 4.9.9.63 Affected: 4.9.9.64 Affected: 4.9.9.65 Affected: 4.9.9.66 Affected: 4.9.9.67 Affected: 4.9.9.68 Affected: 4.9.9.69 Affected: 4.9.9.70 Affected: 4.9.9.71 Affected: 4.9.9.72 Affected: 4.9.9.73 Affected: 4.9.9.74 Affected: 4.9.9.75 Affected: 4.9.9.76 Affected: 4.9.9.77 Affected: 4.9.9.78 Affected: 4.9.9.79 Affected: 4.9.9.80 Affected: 4.9.9.81 Affected: 4.9.9.82 Affected: 4.9.9.83 Affected: 4.9.9.84 Affected: 4.9.9.85 Affected: 4.9.9.86 Affected: 4.9.9.87 Affected: 4.9.9.88 Affected: 4.9.9.89 Affected: 4.9.9.90 Affected: 4.9.9.91 Affected: 4.9.9.92 Affected: 4.9.9.93 Affected: 4.9.9.94 Affected: 4.9.9.95 cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108570",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T13:02:01.242393Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T13:02:30.659Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://vuldb.com/submit/954714"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:*"
],
"modules": [
"View Engine"
],
"product": ".NET Framework",
"vendor": "Furion",
"versions": [
{
"status": "affected",
"version": "4.9.9.0"
},
{
"status": "affected",
"version": "4.9.9.1"
},
{
"status": "affected",
"version": "4.9.9.2"
},
{
"status": "affected",
"version": "4.9.9.3"
},
{
"status": "affected",
"version": "4.9.9.4"
},
{
"status": "affected",
"version": "4.9.9.5"
},
{
"status": "affected",
"version": "4.9.9.6"
},
{
"status": "affected",
"version": "4.9.9.7"
},
{
"status": "affected",
"version": "4.9.9.8"
},
{
"status": "affected",
"version": "4.9.9.9"
},
{
"status": "affected",
"version": "4.9.9.10"
},
{
"status": "affected",
"version": "4.9.9.11"
},
{
"status": "affected",
"version": "4.9.9.12"
},
{
"status": "affected",
"version": "4.9.9.13"
},
{
"status": "affected",
"version": "4.9.9.14"
},
{
"status": "affected",
"version": "4.9.9.15"
},
{
"status": "affected",
"version": "4.9.9.16"
},
{
"status": "affected",
"version": "4.9.9.17"
},
{
"status": "affected",
"version": "4.9.9.18"
},
{
"status": "affected",
"version": "4.9.9.19"
},
{
"status": "affected",
"version": "4.9.9.20"
},
{
"status": "affected",
"version": "4.9.9.21"
},
{
"status": "affected",
"version": "4.9.9.22"
},
{
"status": "affected",
"version": "4.9.9.23"
},
{
"status": "affected",
"version": "4.9.9.24"
},
{
"status": "affected",
"version": "4.9.9.25"
},
{
"status": "affected",
"version": "4.9.9.26"
},
{
"status": "affected",
"version": "4.9.9.27"
},
{
"status": "affected",
"version": "4.9.9.28"
},
{
"status": "affected",
"version": "4.9.9.29"
},
{
"status": "affected",
"version": "4.9.9.30"
},
{
"status": "affected",
"version": "4.9.9.31"
},
{
"status": "affected",
"version": "4.9.9.32"
},
{
"status": "affected",
"version": "4.9.9.33"
},
{
"status": "affected",
"version": "4.9.9.34"
},
{
"status": "affected",
"version": "4.9.9.35"
},
{
"status": "affected",
"version": "4.9.9.36"
},
{
"status": "affected",
"version": "4.9.9.37"
},
{
"status": "affected",
"version": "4.9.9.38"
},
{
"status": "affected",
"version": "4.9.9.39"
},
{
"status": "affected",
"version": "4.9.9.40"
},
{
"status": "affected",
"version": "4.9.9.41"
},
{
"status": "affected",
"version": "4.9.9.42"
},
{
"status": "affected",
"version": "4.9.9.43"
},
{
"status": "affected",
"version": "4.9.9.44"
},
{
"status": "affected",
"version": "4.9.9.45"
},
{
"status": "affected",
"version": "4.9.9.46"
},
{
"status": "affected",
"version": "4.9.9.47"
},
{
"status": "affected",
"version": "4.9.9.48"
},
{
"status": "affected",
"version": "4.9.9.49"
},
{
"status": "affected",
"version": "4.9.9.50"
},
{
"status": "affected",
"version": "4.9.9.51"
},
{
"status": "affected",
"version": "4.9.9.52"
},
{
"status": "affected",
"version": "4.9.9.53"
},
{
"status": "affected",
"version": "4.9.9.54"
},
{
"status": "affected",
"version": "4.9.9.55"
},
{
"status": "affected",
"version": "4.9.9.56"
},
{
"status": "affected",
"version": "4.9.9.57"
},
{
"status": "affected",
"version": "4.9.9.58"
},
{
"status": "affected",
"version": "4.9.9.59"
},
{
"status": "affected",
"version": "4.9.9.60"
},
{
"status": "affected",
"version": "4.9.9.61"
},
{
"status": "affected",
"version": "4.9.9.62"
},
{
"status": "affected",
"version": "4.9.9.63"
},
{
"status": "affected",
"version": "4.9.9.64"
},
{
"status": "affected",
"version": "4.9.9.65"
},
{
"status": "affected",
"version": "4.9.9.66"
},
{
"status": "affected",
"version": "4.9.9.67"
},
{
"status": "affected",
"version": "4.9.9.68"
},
{
"status": "affected",
"version": "4.9.9.69"
},
{
"status": "affected",
"version": "4.9.9.70"
},
{
"status": "affected",
"version": "4.9.9.71"
},
{
"status": "affected",
"version": "4.9.9.72"
},
{
"status": "affected",
"version": "4.9.9.73"
},
{
"status": "affected",
"version": "4.9.9.74"
},
{
"status": "affected",
"version": "4.9.9.75"
},
{
"status": "affected",
"version": "4.9.9.76"
},
{
"status": "affected",
"version": "4.9.9.77"
},
{
"status": "affected",
"version": "4.9.9.78"
},
{
"status": "affected",
"version": "4.9.9.79"
},
{
"status": "affected",
"version": "4.9.9.80"
},
{
"status": "affected",
"version": "4.9.9.81"
},
{
"status": "affected",
"version": "4.9.9.82"
},
{
"status": "affected",
"version": "4.9.9.83"
},
{
"status": "affected",
"version": "4.9.9.84"
},
{
"status": "affected",
"version": "4.9.9.85"
},
{
"status": "affected",
"version": "4.9.9.86"
},
{
"status": "affected",
"version": "4.9.9.87"
},
{
"status": "affected",
"version": "4.9.9.88"
},
{
"status": "affected",
"version": "4.9.9.89"
},
{
"status": "affected",
"version": "4.9.9.90"
},
{
"status": "affected",
"version": "4.9.9.91"
},
{
"status": "affected",
"version": "4.9.9.92"
},
{
"status": "affected",
"version": "4.9.9.93"
},
{
"status": "affected",
"version": "4.9.9.94"
},
{
"status": "affected",
"version": "4.9.9.95"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "BlackSpdier (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special elements used in a template engine. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1336",
"description": "Improper Neutralization of Special Elements Used in a Template Engine",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-791",
"description": "Incomplete Filtering of Special Elements",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T10:30:14.538Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-416227 | Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/416227"
},
{
"name": "VDB-416227 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/416227/cti"
},
{
"name": "CVE-2026-108570 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-108570"
},
{
"name": "Submit #954714 | \u767e\u7b7e\u79d1\u6280\uff08\u5e7f\u4e1c\uff09\u6709\u9650\u516c\u53f8 Furion v4 RCE",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/954714"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-10T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-10T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-10T17:19:35.000Z",
"value": "VulDB entry last update"
}
],
"title": "Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-108570",
"datePublished": "2026-10-11T10:30:14.538Z",
"dateReserved": "2026-10-10T15:14:25.303Z",
"dateUpdated": "2026-10-13T13:02:30.659Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108569 (GCVE-0-2026-108569)
Vulnerability from nvd – Published: 2026-10-11 10:15 – Updated: 2026-10-14 02:50
VLAI
EPSS
VEX
Title
Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection
Summary
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-14 02:50 UTC
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/416226 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/416226/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-108569 | third-party-advisory |
| https://vuldb.com/submit/954713 | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Furion | .NET Framework |
Affected:
4.9.9.0
Affected: 4.9.9.1 Affected: 4.9.9.2 Affected: 4.9.9.3 Affected: 4.9.9.4 Affected: 4.9.9.5 Affected: 4.9.9.6 Affected: 4.9.9.7 Affected: 4.9.9.8 Affected: 4.9.9.9 Affected: 4.9.9.10 Affected: 4.9.9.11 Affected: 4.9.9.12 Affected: 4.9.9.13 Affected: 4.9.9.14 Affected: 4.9.9.15 Affected: 4.9.9.16 Affected: 4.9.9.17 Affected: 4.9.9.18 Affected: 4.9.9.19 Affected: 4.9.9.20 Affected: 4.9.9.21 Affected: 4.9.9.22 Affected: 4.9.9.23 Affected: 4.9.9.24 Affected: 4.9.9.25 Affected: 4.9.9.26 Affected: 4.9.9.27 Affected: 4.9.9.28 Affected: 4.9.9.29 Affected: 4.9.9.30 Affected: 4.9.9.31 Affected: 4.9.9.32 Affected: 4.9.9.33 Affected: 4.9.9.34 Affected: 4.9.9.35 Affected: 4.9.9.36 Affected: 4.9.9.37 Affected: 4.9.9.38 Affected: 4.9.9.39 Affected: 4.9.9.40 Affected: 4.9.9.41 Affected: 4.9.9.42 Affected: 4.9.9.43 Affected: 4.9.9.44 Affected: 4.9.9.45 Affected: 4.9.9.46 Affected: 4.9.9.47 Affected: 4.9.9.48 Affected: 4.9.9.49 Affected: 4.9.9.50 Affected: 4.9.9.51 Affected: 4.9.9.52 Affected: 4.9.9.53 Affected: 4.9.9.54 Affected: 4.9.9.55 Affected: 4.9.9.56 Affected: 4.9.9.57 Affected: 4.9.9.58 Affected: 4.9.9.59 Affected: 4.9.9.60 Affected: 4.9.9.61 Affected: 4.9.9.62 Affected: 4.9.9.63 Affected: 4.9.9.64 Affected: 4.9.9.65 Affected: 4.9.9.66 Affected: 4.9.9.67 Affected: 4.9.9.68 Affected: 4.9.9.69 Affected: 4.9.9.70 Affected: 4.9.9.71 Affected: 4.9.9.72 Affected: 4.9.9.73 Affected: 4.9.9.74 Affected: 4.9.9.75 Affected: 4.9.9.76 Affected: 4.9.9.77 Affected: 4.9.9.78 Affected: 4.9.9.79 Affected: 4.9.9.80 Affected: 4.9.9.81 Affected: 4.9.9.82 Affected: 4.9.9.83 Affected: 4.9.9.84 Affected: 4.9.9.85 Affected: 4.9.9.86 Affected: 4.9.9.87 Affected: 4.9.9.88 Affected: 4.9.9.89 Affected: 4.9.9.90 Affected: 4.9.9.91 Affected: 4.9.9.92 cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108569",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-14T02:50:16.181678Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-14T02:50:25.550Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:*"
],
"product": ".NET Framework",
"vendor": "Furion",
"versions": [
{
"status": "affected",
"version": "4.9.9.0"
},
{
"status": "affected",
"version": "4.9.9.1"
},
{
"status": "affected",
"version": "4.9.9.2"
},
{
"status": "affected",
"version": "4.9.9.3"
},
{
"status": "affected",
"version": "4.9.9.4"
},
{
"status": "affected",
"version": "4.9.9.5"
},
{
"status": "affected",
"version": "4.9.9.6"
},
{
"status": "affected",
"version": "4.9.9.7"
},
{
"status": "affected",
"version": "4.9.9.8"
},
{
"status": "affected",
"version": "4.9.9.9"
},
{
"status": "affected",
"version": "4.9.9.10"
},
{
"status": "affected",
"version": "4.9.9.11"
},
{
"status": "affected",
"version": "4.9.9.12"
},
{
"status": "affected",
"version": "4.9.9.13"
},
{
"status": "affected",
"version": "4.9.9.14"
},
{
"status": "affected",
"version": "4.9.9.15"
},
{
"status": "affected",
"version": "4.9.9.16"
},
{
"status": "affected",
"version": "4.9.9.17"
},
{
"status": "affected",
"version": "4.9.9.18"
},
{
"status": "affected",
"version": "4.9.9.19"
},
{
"status": "affected",
"version": "4.9.9.20"
},
{
"status": "affected",
"version": "4.9.9.21"
},
{
"status": "affected",
"version": "4.9.9.22"
},
{
"status": "affected",
"version": "4.9.9.23"
},
{
"status": "affected",
"version": "4.9.9.24"
},
{
"status": "affected",
"version": "4.9.9.25"
},
{
"status": "affected",
"version": "4.9.9.26"
},
{
"status": "affected",
"version": "4.9.9.27"
},
{
"status": "affected",
"version": "4.9.9.28"
},
{
"status": "affected",
"version": "4.9.9.29"
},
{
"status": "affected",
"version": "4.9.9.30"
},
{
"status": "affected",
"version": "4.9.9.31"
},
{
"status": "affected",
"version": "4.9.9.32"
},
{
"status": "affected",
"version": "4.9.9.33"
},
{
"status": "affected",
"version": "4.9.9.34"
},
{
"status": "affected",
"version": "4.9.9.35"
},
{
"status": "affected",
"version": "4.9.9.36"
},
{
"status": "affected",
"version": "4.9.9.37"
},
{
"status": "affected",
"version": "4.9.9.38"
},
{
"status": "affected",
"version": "4.9.9.39"
},
{
"status": "affected",
"version": "4.9.9.40"
},
{
"status": "affected",
"version": "4.9.9.41"
},
{
"status": "affected",
"version": "4.9.9.42"
},
{
"status": "affected",
"version": "4.9.9.43"
},
{
"status": "affected",
"version": "4.9.9.44"
},
{
"status": "affected",
"version": "4.9.9.45"
},
{
"status": "affected",
"version": "4.9.9.46"
},
{
"status": "affected",
"version": "4.9.9.47"
},
{
"status": "affected",
"version": "4.9.9.48"
},
{
"status": "affected",
"version": "4.9.9.49"
},
{
"status": "affected",
"version": "4.9.9.50"
},
{
"status": "affected",
"version": "4.9.9.51"
},
{
"status": "affected",
"version": "4.9.9.52"
},
{
"status": "affected",
"version": "4.9.9.53"
},
{
"status": "affected",
"version": "4.9.9.54"
},
{
"status": "affected",
"version": "4.9.9.55"
},
{
"status": "affected",
"version": "4.9.9.56"
},
{
"status": "affected",
"version": "4.9.9.57"
},
{
"status": "affected",
"version": "4.9.9.58"
},
{
"status": "affected",
"version": "4.9.9.59"
},
{
"status": "affected",
"version": "4.9.9.60"
},
{
"status": "affected",
"version": "4.9.9.61"
},
{
"status": "affected",
"version": "4.9.9.62"
},
{
"status": "affected",
"version": "4.9.9.63"
},
{
"status": "affected",
"version": "4.9.9.64"
},
{
"status": "affected",
"version": "4.9.9.65"
},
{
"status": "affected",
"version": "4.9.9.66"
},
{
"status": "affected",
"version": "4.9.9.67"
},
{
"status": "affected",
"version": "4.9.9.68"
},
{
"status": "affected",
"version": "4.9.9.69"
},
{
"status": "affected",
"version": "4.9.9.70"
},
{
"status": "affected",
"version": "4.9.9.71"
},
{
"status": "affected",
"version": "4.9.9.72"
},
{
"status": "affected",
"version": "4.9.9.73"
},
{
"status": "affected",
"version": "4.9.9.74"
},
{
"status": "affected",
"version": "4.9.9.75"
},
{
"status": "affected",
"version": "4.9.9.76"
},
{
"status": "affected",
"version": "4.9.9.77"
},
{
"status": "affected",
"version": "4.9.9.78"
},
{
"status": "affected",
"version": "4.9.9.79"
},
{
"status": "affected",
"version": "4.9.9.80"
},
{
"status": "affected",
"version": "4.9.9.81"
},
{
"status": "affected",
"version": "4.9.9.82"
},
{
"status": "affected",
"version": "4.9.9.83"
},
{
"status": "affected",
"version": "4.9.9.84"
},
{
"status": "affected",
"version": "4.9.9.85"
},
{
"status": "affected",
"version": "4.9.9.86"
},
{
"status": "affected",
"version": "4.9.9.87"
},
{
"status": "affected",
"version": "4.9.9.88"
},
{
"status": "affected",
"version": "4.9.9.89"
},
{
"status": "affected",
"version": "4.9.9.90"
},
{
"status": "affected",
"version": "4.9.9.91"
},
{
"status": "affected",
"version": "4.9.9.92"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "BlackSpdier (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T10:15:09.779Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-416226 | Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/416226"
},
{
"name": "VDB-416226 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/416226/cti"
},
{
"name": "CVE-2026-108569 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-108569"
},
{
"name": "Submit #954713 | \u767e\u7b7e\u79d1\u6280\uff08\u5e7f\u4e1c\uff09\u6709\u9650\u516c\u53f8\u82f1\u6587\u540d Furion v4 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/954713"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-10T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-10T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-10T17:19:31.000Z",
"value": "VulDB entry last update"
}
],
"title": "Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-108569",
"datePublished": "2026-10-11T10:15:09.779Z",
"dateReserved": "2026-10-10T15:14:21.530Z",
"dateUpdated": "2026-10-14T02:50:25.550Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108570 (GCVE-0-2026-108570)
Vulnerability from cvelistv5 – Published: 2026-10-11 10:30 – Updated: 2026-10-13 13:02
VLAI
EPSS
VEX
Title
Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine
Summary
A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special elements used in a template engine. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 13:02 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/416227 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/416227/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-108570 | third-party-advisory |
| https://vuldb.com/submit/954714 | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Furion | .NET Framework |
Affected:
4.9.9.0
Affected: 4.9.9.1 Affected: 4.9.9.2 Affected: 4.9.9.3 Affected: 4.9.9.4 Affected: 4.9.9.5 Affected: 4.9.9.6 Affected: 4.9.9.7 Affected: 4.9.9.8 Affected: 4.9.9.9 Affected: 4.9.9.10 Affected: 4.9.9.11 Affected: 4.9.9.12 Affected: 4.9.9.13 Affected: 4.9.9.14 Affected: 4.9.9.15 Affected: 4.9.9.16 Affected: 4.9.9.17 Affected: 4.9.9.18 Affected: 4.9.9.19 Affected: 4.9.9.20 Affected: 4.9.9.21 Affected: 4.9.9.22 Affected: 4.9.9.23 Affected: 4.9.9.24 Affected: 4.9.9.25 Affected: 4.9.9.26 Affected: 4.9.9.27 Affected: 4.9.9.28 Affected: 4.9.9.29 Affected: 4.9.9.30 Affected: 4.9.9.31 Affected: 4.9.9.32 Affected: 4.9.9.33 Affected: 4.9.9.34 Affected: 4.9.9.35 Affected: 4.9.9.36 Affected: 4.9.9.37 Affected: 4.9.9.38 Affected: 4.9.9.39 Affected: 4.9.9.40 Affected: 4.9.9.41 Affected: 4.9.9.42 Affected: 4.9.9.43 Affected: 4.9.9.44 Affected: 4.9.9.45 Affected: 4.9.9.46 Affected: 4.9.9.47 Affected: 4.9.9.48 Affected: 4.9.9.49 Affected: 4.9.9.50 Affected: 4.9.9.51 Affected: 4.9.9.52 Affected: 4.9.9.53 Affected: 4.9.9.54 Affected: 4.9.9.55 Affected: 4.9.9.56 Affected: 4.9.9.57 Affected: 4.9.9.58 Affected: 4.9.9.59 Affected: 4.9.9.60 Affected: 4.9.9.61 Affected: 4.9.9.62 Affected: 4.9.9.63 Affected: 4.9.9.64 Affected: 4.9.9.65 Affected: 4.9.9.66 Affected: 4.9.9.67 Affected: 4.9.9.68 Affected: 4.9.9.69 Affected: 4.9.9.70 Affected: 4.9.9.71 Affected: 4.9.9.72 Affected: 4.9.9.73 Affected: 4.9.9.74 Affected: 4.9.9.75 Affected: 4.9.9.76 Affected: 4.9.9.77 Affected: 4.9.9.78 Affected: 4.9.9.79 Affected: 4.9.9.80 Affected: 4.9.9.81 Affected: 4.9.9.82 Affected: 4.9.9.83 Affected: 4.9.9.84 Affected: 4.9.9.85 Affected: 4.9.9.86 Affected: 4.9.9.87 Affected: 4.9.9.88 Affected: 4.9.9.89 Affected: 4.9.9.90 Affected: 4.9.9.91 Affected: 4.9.9.92 Affected: 4.9.9.93 Affected: 4.9.9.94 Affected: 4.9.9.95 cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108570",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T13:02:01.242393Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T13:02:30.659Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://vuldb.com/submit/954714"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:*"
],
"modules": [
"View Engine"
],
"product": ".NET Framework",
"vendor": "Furion",
"versions": [
{
"status": "affected",
"version": "4.9.9.0"
},
{
"status": "affected",
"version": "4.9.9.1"
},
{
"status": "affected",
"version": "4.9.9.2"
},
{
"status": "affected",
"version": "4.9.9.3"
},
{
"status": "affected",
"version": "4.9.9.4"
},
{
"status": "affected",
"version": "4.9.9.5"
},
{
"status": "affected",
"version": "4.9.9.6"
},
{
"status": "affected",
"version": "4.9.9.7"
},
{
"status": "affected",
"version": "4.9.9.8"
},
{
"status": "affected",
"version": "4.9.9.9"
},
{
"status": "affected",
"version": "4.9.9.10"
},
{
"status": "affected",
"version": "4.9.9.11"
},
{
"status": "affected",
"version": "4.9.9.12"
},
{
"status": "affected",
"version": "4.9.9.13"
},
{
"status": "affected",
"version": "4.9.9.14"
},
{
"status": "affected",
"version": "4.9.9.15"
},
{
"status": "affected",
"version": "4.9.9.16"
},
{
"status": "affected",
"version": "4.9.9.17"
},
{
"status": "affected",
"version": "4.9.9.18"
},
{
"status": "affected",
"version": "4.9.9.19"
},
{
"status": "affected",
"version": "4.9.9.20"
},
{
"status": "affected",
"version": "4.9.9.21"
},
{
"status": "affected",
"version": "4.9.9.22"
},
{
"status": "affected",
"version": "4.9.9.23"
},
{
"status": "affected",
"version": "4.9.9.24"
},
{
"status": "affected",
"version": "4.9.9.25"
},
{
"status": "affected",
"version": "4.9.9.26"
},
{
"status": "affected",
"version": "4.9.9.27"
},
{
"status": "affected",
"version": "4.9.9.28"
},
{
"status": "affected",
"version": "4.9.9.29"
},
{
"status": "affected",
"version": "4.9.9.30"
},
{
"status": "affected",
"version": "4.9.9.31"
},
{
"status": "affected",
"version": "4.9.9.32"
},
{
"status": "affected",
"version": "4.9.9.33"
},
{
"status": "affected",
"version": "4.9.9.34"
},
{
"status": "affected",
"version": "4.9.9.35"
},
{
"status": "affected",
"version": "4.9.9.36"
},
{
"status": "affected",
"version": "4.9.9.37"
},
{
"status": "affected",
"version": "4.9.9.38"
},
{
"status": "affected",
"version": "4.9.9.39"
},
{
"status": "affected",
"version": "4.9.9.40"
},
{
"status": "affected",
"version": "4.9.9.41"
},
{
"status": "affected",
"version": "4.9.9.42"
},
{
"status": "affected",
"version": "4.9.9.43"
},
{
"status": "affected",
"version": "4.9.9.44"
},
{
"status": "affected",
"version": "4.9.9.45"
},
{
"status": "affected",
"version": "4.9.9.46"
},
{
"status": "affected",
"version": "4.9.9.47"
},
{
"status": "affected",
"version": "4.9.9.48"
},
{
"status": "affected",
"version": "4.9.9.49"
},
{
"status": "affected",
"version": "4.9.9.50"
},
{
"status": "affected",
"version": "4.9.9.51"
},
{
"status": "affected",
"version": "4.9.9.52"
},
{
"status": "affected",
"version": "4.9.9.53"
},
{
"status": "affected",
"version": "4.9.9.54"
},
{
"status": "affected",
"version": "4.9.9.55"
},
{
"status": "affected",
"version": "4.9.9.56"
},
{
"status": "affected",
"version": "4.9.9.57"
},
{
"status": "affected",
"version": "4.9.9.58"
},
{
"status": "affected",
"version": "4.9.9.59"
},
{
"status": "affected",
"version": "4.9.9.60"
},
{
"status": "affected",
"version": "4.9.9.61"
},
{
"status": "affected",
"version": "4.9.9.62"
},
{
"status": "affected",
"version": "4.9.9.63"
},
{
"status": "affected",
"version": "4.9.9.64"
},
{
"status": "affected",
"version": "4.9.9.65"
},
{
"status": "affected",
"version": "4.9.9.66"
},
{
"status": "affected",
"version": "4.9.9.67"
},
{
"status": "affected",
"version": "4.9.9.68"
},
{
"status": "affected",
"version": "4.9.9.69"
},
{
"status": "affected",
"version": "4.9.9.70"
},
{
"status": "affected",
"version": "4.9.9.71"
},
{
"status": "affected",
"version": "4.9.9.72"
},
{
"status": "affected",
"version": "4.9.9.73"
},
{
"status": "affected",
"version": "4.9.9.74"
},
{
"status": "affected",
"version": "4.9.9.75"
},
{
"status": "affected",
"version": "4.9.9.76"
},
{
"status": "affected",
"version": "4.9.9.77"
},
{
"status": "affected",
"version": "4.9.9.78"
},
{
"status": "affected",
"version": "4.9.9.79"
},
{
"status": "affected",
"version": "4.9.9.80"
},
{
"status": "affected",
"version": "4.9.9.81"
},
{
"status": "affected",
"version": "4.9.9.82"
},
{
"status": "affected",
"version": "4.9.9.83"
},
{
"status": "affected",
"version": "4.9.9.84"
},
{
"status": "affected",
"version": "4.9.9.85"
},
{
"status": "affected",
"version": "4.9.9.86"
},
{
"status": "affected",
"version": "4.9.9.87"
},
{
"status": "affected",
"version": "4.9.9.88"
},
{
"status": "affected",
"version": "4.9.9.89"
},
{
"status": "affected",
"version": "4.9.9.90"
},
{
"status": "affected",
"version": "4.9.9.91"
},
{
"status": "affected",
"version": "4.9.9.92"
},
{
"status": "affected",
"version": "4.9.9.93"
},
{
"status": "affected",
"version": "4.9.9.94"
},
{
"status": "affected",
"version": "4.9.9.95"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "BlackSpdier (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special elements used in a template engine. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1336",
"description": "Improper Neutralization of Special Elements Used in a Template Engine",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-791",
"description": "Incomplete Filtering of Special Elements",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T10:30:14.538Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-416227 | Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/416227"
},
{
"name": "VDB-416227 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/416227/cti"
},
{
"name": "CVE-2026-108570 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-108570"
},
{
"name": "Submit #954714 | \u767e\u7b7e\u79d1\u6280\uff08\u5e7f\u4e1c\uff09\u6709\u9650\u516c\u53f8 Furion v4 RCE",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/954714"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-10T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-10T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-10T17:19:35.000Z",
"value": "VulDB entry last update"
}
],
"title": "Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-108570",
"datePublished": "2026-10-11T10:30:14.538Z",
"dateReserved": "2026-10-10T15:14:25.303Z",
"dateUpdated": "2026-10-13T13:02:30.659Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108569 (GCVE-0-2026-108569)
Vulnerability from cvelistv5 – Published: 2026-10-11 10:15 – Updated: 2026-10-14 02:50
VLAI
EPSS
VEX
Title
Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection
Summary
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-14 02:50 UTC
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/416226 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/416226/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-108569 | third-party-advisory |
| https://vuldb.com/submit/954713 | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Furion | .NET Framework |
Affected:
4.9.9.0
Affected: 4.9.9.1 Affected: 4.9.9.2 Affected: 4.9.9.3 Affected: 4.9.9.4 Affected: 4.9.9.5 Affected: 4.9.9.6 Affected: 4.9.9.7 Affected: 4.9.9.8 Affected: 4.9.9.9 Affected: 4.9.9.10 Affected: 4.9.9.11 Affected: 4.9.9.12 Affected: 4.9.9.13 Affected: 4.9.9.14 Affected: 4.9.9.15 Affected: 4.9.9.16 Affected: 4.9.9.17 Affected: 4.9.9.18 Affected: 4.9.9.19 Affected: 4.9.9.20 Affected: 4.9.9.21 Affected: 4.9.9.22 Affected: 4.9.9.23 Affected: 4.9.9.24 Affected: 4.9.9.25 Affected: 4.9.9.26 Affected: 4.9.9.27 Affected: 4.9.9.28 Affected: 4.9.9.29 Affected: 4.9.9.30 Affected: 4.9.9.31 Affected: 4.9.9.32 Affected: 4.9.9.33 Affected: 4.9.9.34 Affected: 4.9.9.35 Affected: 4.9.9.36 Affected: 4.9.9.37 Affected: 4.9.9.38 Affected: 4.9.9.39 Affected: 4.9.9.40 Affected: 4.9.9.41 Affected: 4.9.9.42 Affected: 4.9.9.43 Affected: 4.9.9.44 Affected: 4.9.9.45 Affected: 4.9.9.46 Affected: 4.9.9.47 Affected: 4.9.9.48 Affected: 4.9.9.49 Affected: 4.9.9.50 Affected: 4.9.9.51 Affected: 4.9.9.52 Affected: 4.9.9.53 Affected: 4.9.9.54 Affected: 4.9.9.55 Affected: 4.9.9.56 Affected: 4.9.9.57 Affected: 4.9.9.58 Affected: 4.9.9.59 Affected: 4.9.9.60 Affected: 4.9.9.61 Affected: 4.9.9.62 Affected: 4.9.9.63 Affected: 4.9.9.64 Affected: 4.9.9.65 Affected: 4.9.9.66 Affected: 4.9.9.67 Affected: 4.9.9.68 Affected: 4.9.9.69 Affected: 4.9.9.70 Affected: 4.9.9.71 Affected: 4.9.9.72 Affected: 4.9.9.73 Affected: 4.9.9.74 Affected: 4.9.9.75 Affected: 4.9.9.76 Affected: 4.9.9.77 Affected: 4.9.9.78 Affected: 4.9.9.79 Affected: 4.9.9.80 Affected: 4.9.9.81 Affected: 4.9.9.82 Affected: 4.9.9.83 Affected: 4.9.9.84 Affected: 4.9.9.85 Affected: 4.9.9.86 Affected: 4.9.9.87 Affected: 4.9.9.88 Affected: 4.9.9.89 Affected: 4.9.9.90 Affected: 4.9.9.91 Affected: 4.9.9.92 cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108569",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-14T02:50:16.181678Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-14T02:50:25.550Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:*"
],
"product": ".NET Framework",
"vendor": "Furion",
"versions": [
{
"status": "affected",
"version": "4.9.9.0"
},
{
"status": "affected",
"version": "4.9.9.1"
},
{
"status": "affected",
"version": "4.9.9.2"
},
{
"status": "affected",
"version": "4.9.9.3"
},
{
"status": "affected",
"version": "4.9.9.4"
},
{
"status": "affected",
"version": "4.9.9.5"
},
{
"status": "affected",
"version": "4.9.9.6"
},
{
"status": "affected",
"version": "4.9.9.7"
},
{
"status": "affected",
"version": "4.9.9.8"
},
{
"status": "affected",
"version": "4.9.9.9"
},
{
"status": "affected",
"version": "4.9.9.10"
},
{
"status": "affected",
"version": "4.9.9.11"
},
{
"status": "affected",
"version": "4.9.9.12"
},
{
"status": "affected",
"version": "4.9.9.13"
},
{
"status": "affected",
"version": "4.9.9.14"
},
{
"status": "affected",
"version": "4.9.9.15"
},
{
"status": "affected",
"version": "4.9.9.16"
},
{
"status": "affected",
"version": "4.9.9.17"
},
{
"status": "affected",
"version": "4.9.9.18"
},
{
"status": "affected",
"version": "4.9.9.19"
},
{
"status": "affected",
"version": "4.9.9.20"
},
{
"status": "affected",
"version": "4.9.9.21"
},
{
"status": "affected",
"version": "4.9.9.22"
},
{
"status": "affected",
"version": "4.9.9.23"
},
{
"status": "affected",
"version": "4.9.9.24"
},
{
"status": "affected",
"version": "4.9.9.25"
},
{
"status": "affected",
"version": "4.9.9.26"
},
{
"status": "affected",
"version": "4.9.9.27"
},
{
"status": "affected",
"version": "4.9.9.28"
},
{
"status": "affected",
"version": "4.9.9.29"
},
{
"status": "affected",
"version": "4.9.9.30"
},
{
"status": "affected",
"version": "4.9.9.31"
},
{
"status": "affected",
"version": "4.9.9.32"
},
{
"status": "affected",
"version": "4.9.9.33"
},
{
"status": "affected",
"version": "4.9.9.34"
},
{
"status": "affected",
"version": "4.9.9.35"
},
{
"status": "affected",
"version": "4.9.9.36"
},
{
"status": "affected",
"version": "4.9.9.37"
},
{
"status": "affected",
"version": "4.9.9.38"
},
{
"status": "affected",
"version": "4.9.9.39"
},
{
"status": "affected",
"version": "4.9.9.40"
},
{
"status": "affected",
"version": "4.9.9.41"
},
{
"status": "affected",
"version": "4.9.9.42"
},
{
"status": "affected",
"version": "4.9.9.43"
},
{
"status": "affected",
"version": "4.9.9.44"
},
{
"status": "affected",
"version": "4.9.9.45"
},
{
"status": "affected",
"version": "4.9.9.46"
},
{
"status": "affected",
"version": "4.9.9.47"
},
{
"status": "affected",
"version": "4.9.9.48"
},
{
"status": "affected",
"version": "4.9.9.49"
},
{
"status": "affected",
"version": "4.9.9.50"
},
{
"status": "affected",
"version": "4.9.9.51"
},
{
"status": "affected",
"version": "4.9.9.52"
},
{
"status": "affected",
"version": "4.9.9.53"
},
{
"status": "affected",
"version": "4.9.9.54"
},
{
"status": "affected",
"version": "4.9.9.55"
},
{
"status": "affected",
"version": "4.9.9.56"
},
{
"status": "affected",
"version": "4.9.9.57"
},
{
"status": "affected",
"version": "4.9.9.58"
},
{
"status": "affected",
"version": "4.9.9.59"
},
{
"status": "affected",
"version": "4.9.9.60"
},
{
"status": "affected",
"version": "4.9.9.61"
},
{
"status": "affected",
"version": "4.9.9.62"
},
{
"status": "affected",
"version": "4.9.9.63"
},
{
"status": "affected",
"version": "4.9.9.64"
},
{
"status": "affected",
"version": "4.9.9.65"
},
{
"status": "affected",
"version": "4.9.9.66"
},
{
"status": "affected",
"version": "4.9.9.67"
},
{
"status": "affected",
"version": "4.9.9.68"
},
{
"status": "affected",
"version": "4.9.9.69"
},
{
"status": "affected",
"version": "4.9.9.70"
},
{
"status": "affected",
"version": "4.9.9.71"
},
{
"status": "affected",
"version": "4.9.9.72"
},
{
"status": "affected",
"version": "4.9.9.73"
},
{
"status": "affected",
"version": "4.9.9.74"
},
{
"status": "affected",
"version": "4.9.9.75"
},
{
"status": "affected",
"version": "4.9.9.76"
},
{
"status": "affected",
"version": "4.9.9.77"
},
{
"status": "affected",
"version": "4.9.9.78"
},
{
"status": "affected",
"version": "4.9.9.79"
},
{
"status": "affected",
"version": "4.9.9.80"
},
{
"status": "affected",
"version": "4.9.9.81"
},
{
"status": "affected",
"version": "4.9.9.82"
},
{
"status": "affected",
"version": "4.9.9.83"
},
{
"status": "affected",
"version": "4.9.9.84"
},
{
"status": "affected",
"version": "4.9.9.85"
},
{
"status": "affected",
"version": "4.9.9.86"
},
{
"status": "affected",
"version": "4.9.9.87"
},
{
"status": "affected",
"version": "4.9.9.88"
},
{
"status": "affected",
"version": "4.9.9.89"
},
{
"status": "affected",
"version": "4.9.9.90"
},
{
"status": "affected",
"version": "4.9.9.91"
},
{
"status": "affected",
"version": "4.9.9.92"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "BlackSpdier (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T10:15:09.779Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-416226 | Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/416226"
},
{
"name": "VDB-416226 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/416226/cti"
},
{
"name": "CVE-2026-108569 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-108569"
},
{
"name": "Submit #954713 | \u767e\u7b7e\u79d1\u6280\uff08\u5e7f\u4e1c\uff09\u6709\u9650\u516c\u53f8\u82f1\u6587\u540d Furion v4 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/954713"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-10T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-10T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-10T17:19:31.000Z",
"value": "VulDB entry last update"
}
],
"title": "Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-108569",
"datePublished": "2026-10-11T10:15:09.779Z",
"dateReserved": "2026-10-10T15:14:21.530Z",
"dateUpdated": "2026-10-14T02:50:25.550Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}