🔐 CVE Alert

CVE-2026-108569

MEDIUM 6.3

Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection

CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE CWE-89 CWE-74
Vendor furion
Product .net framework
Published Oct 11, 2026
Stay Ahead of the Next One

Get instant alerts for furion .net framework

Be the first to know when new medium vulnerabilities affecting furion .net framework are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Furion / .NET Framework
4.9.9.0 4.9.9.1 4.9.9.2 4.9.9.3 4.9.9.4 4.9.9.5 4.9.9.6 4.9.9.7 4.9.9.8 4.9.9.9 4.9.9.10 4.9.9.11 4.9.9.12 4.9.9.13 4.9.9.14 4.9.9.15 4.9.9.16 4.9.9.17 4.9.9.18 4.9.9.19 4.9.9.20 4.9.9.21 4.9.9.22 4.9.9.23 4.9.9.24 4.9.9.25 4.9.9.26 4.9.9.27 4.9.9.28 4.9.9.29 4.9.9.30 4.9.9.31 4.9.9.32 4.9.9.33 4.9.9.34 4.9.9.35 4.9.9.36 4.9.9.37 4.9.9.38 4.9.9.39 4.9.9.40 4.9.9.41 4.9.9.42 4.9.9.43 4.9.9.44 4.9.9.45 4.9.9.46 4.9.9.47 4.9.9.48 4.9.9.49 4.9.9.50 4.9.9.51 4.9.9.52 4.9.9.53 4.9.9.54 4.9.9.55 4.9.9.56 4.9.9.57 4.9.9.58 4.9.9.59 4.9.9.60 4.9.9.61 4.9.9.62 4.9.9.63 4.9.9.64 4.9.9.65 4.9.9.66 4.9.9.67 4.9.9.68 4.9.9.69 4.9.9.70 4.9.9.71 4.9.9.72 4.9.9.73 4.9.9.74 4.9.9.75 4.9.9.76 4.9.9.77 4.9.9.78 4.9.9.79 4.9.9.80 4.9.9.81 4.9.9.82 4.9.9.83 4.9.9.84 4.9.9.85 4.9.9.86 4.9.9.87 4.9.9.88 4.9.9.89 4.9.9.90 4.9.9.91 4.9.9.92

References

NVD ↗ CVE.org ↗ EPSS Data ↗
vuldb.com: https://vuldb.com/vuln/416226 vuldb.com: https://vuldb.com/vuln/416226/cti vuldb.com: https://vuldb.com/cve/CVE-2026-108569 vuldb.com: https://vuldb.com/submit/954713

Credits

🔍 BlackSpdier (VulDB User) VulDB CNA Team