CVE-2026-108570 | Furion .NET Framework up to 4.9.9.95 View Engine ViewEngine.cs RunCompile content special elements in template engine

October 10, 2026 Yanac

A vulnerability was found in Furion .NET Framework up to 4.9.9.95. It has been declared as critical. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special elements used in a template engine.

This vulnerability is identified as CVE-2026-108570. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More