CVE-2026-108569 | Furion .NET Framework up to 4.9.9.92 StringRenderExtensions.cs String.Replace name sql injection

October 10, 2026 Yanac

A vulnerability was found in Furion .NET Framework up to 4.9.9.92. It has been classified as critical. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection.

This vulnerability is referenced as CVE-2026-108569. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More