CVE-2026-108569 - Vulnerability Details

- Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection

Description

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published: 2026-10-11

Score: 5.3 Medium

EPSS: n/a

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability lies in the String.Replace method of the StringRenderExtensions.cs file within the Furion .NET Framework. Manipulating the Name argument allows an attacker to inject arbitrary SQL, which can be executed by the application. This flaw is a classic injection issue categorized as CWE-74 and CWE-89, and it results in remote SQL injection when the application processes user‑supplied input.

Affected Systems

Any deployment of Furion .NET Framework version 4.9.9.92 or earlier is affected. No specific product or sub‑component beyond the framework itself is listed.

Risk and Exploitability

The CVSS base score of 5.3 indicates moderate severity. EPSS is not available, and the vulnerability is not listed in CISA's KEV catalog. Because the flaw permits remote exploitation and public exploits are available, the risk is significant for applications that expose the templating or rendering functions to external users. The likely attack vector is an attacker supplying the Name parameter to the Replace call, which then propagates unsanitized input into a SQL statement, potentially leading to data exfiltration or modification.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Furion

.NET Framework

affected

Version	Status	Constraints
`4.9.9.0`	affected	—
`4.9.9.1`	affected	—
`4.9.9.2`	affected	—
`4.9.9.3`	affected	—
`4.9.9.4`	affected	—
`4.9.9.5`	affected	—
`4.9.9.6`	affected	—
`4.9.9.7`	affected	—
`4.9.9.8`	affected	—
`4.9.9.9`	affected	—
`4.9.9.10`	affected	—
`4.9.9.11`	affected	—
`4.9.9.12`	affected	—
`4.9.9.13`	affected	—
`4.9.9.14`	affected	—
`4.9.9.15`	affected	—
`4.9.9.16`	affected	—
`4.9.9.17`	affected	—
`4.9.9.18`	affected	—
`4.9.9.19`	affected	—
`4.9.9.20`	affected	—
`4.9.9.21`	affected	—
`4.9.9.22`	affected	—
`4.9.9.23`	affected	—
`4.9.9.24`	affected	—
`4.9.9.25`	affected	—
`4.9.9.26`	affected	—
`4.9.9.27`	affected	—
`4.9.9.28`	affected	—
`4.9.9.29`	affected	—
`4.9.9.30`	affected	—
`4.9.9.31`	affected	—
`4.9.9.32`	affected	—
`4.9.9.33`	affected	—
`4.9.9.34`	affected	—
`4.9.9.35`	affected	—
`4.9.9.36`	affected	—
`4.9.9.37`	affected	—
`4.9.9.38`	affected	—
`4.9.9.39`	affected	—
`4.9.9.40`	affected	—
`4.9.9.41`	affected	—
`4.9.9.42`	affected	—
`4.9.9.43`	affected	—
`4.9.9.44`	affected	—
`4.9.9.45`	affected	—
`4.9.9.46`	affected	—
`4.9.9.47`	affected	—
`4.9.9.48`	affected	—
`4.9.9.49`	affected	—
`4.9.9.50`	affected	—
`4.9.9.51`	affected	—
`4.9.9.52`	affected	—
`4.9.9.53`	affected	—
`4.9.9.54`	affected	—
`4.9.9.55`	affected	—
`4.9.9.56`	affected	—
`4.9.9.57`	affected	—
`4.9.9.58`	affected	—
`4.9.9.59`	affected	—
`4.9.9.60`	affected	—
`4.9.9.61`	affected	—
`4.9.9.62`	affected	—
`4.9.9.63`	affected	—
`4.9.9.64`	affected	—
`4.9.9.65`	affected	—
`4.9.9.66`	affected	—
`4.9.9.67`	affected	—
`4.9.9.68`	affected	—
`4.9.9.69`	affected	—
`4.9.9.70`	affected	—
`4.9.9.71`	affected	—
`4.9.9.72`	affected	—
`4.9.9.73`	affected	—
`4.9.9.74`	affected	—
`4.9.9.75`	affected	—
`4.9.9.76`	affected	—
`4.9.9.77`	affected	—
`4.9.9.78`	affected	—
`4.9.9.79`	affected	—
`4.9.9.80`	affected	—
`4.9.9.81`	affected	—
`4.9.9.82`	affected	—
`4.9.9.83`	affected	—
`4.9.9.84`	affected	—
`4.9.9.85`	affected	—
`4.9.9.86`	affected	—
`4.9.9.87`	affected	—
`4.9.9.88`	affected	—
`4.9.9.89`	affected	—
`4.9.9.90`	affected	—
`4.9.9.91`	affected	—
`4.9.9.92`	affected	—

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade the Furion .NET Framework to a version newer than 4.9.9.92 that validates or sanitizes the Name argument before using Replace.
If an upgrade is not possible, sanitize the Name parameter—whitelist allowed characters or apply strict validation—before passing it to Replace.
Reconfigure the application to avoid using this Replace method for rendering dynamic SQL; instead, use parameterized queries or a safe templating engine.

Generated by OpenCVE AI on October 11, 2026 at 11:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://vuldb.com/cve/CVE-2026-108569
https://vuldb.com/submit/954713
https://vuldb.com/vuln/416226
https://vuldb.com/vuln/416226/cti

History

Sun, 11 Oct 2026 10:30:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title		Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection
First Time appeared		Furion Furion .net Framework
Weaknesses		CWE-74 CWE-89
CPEs		cpe:2.3:a:furion:.net_framework::::::::
Vendors & Products		Furion Furion .net Framework
References		https://vuldb.com/cve/CVE-2026-108569 https://vuldb.com/submit/954713 https://vuldb.com/vuln/416226 https://vuldb.com/vuln/416226/cti
Metrics		cvssV2_0 `{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}` cvssV3_0 `{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}` cvssV3_1 `{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Furion .net Framework

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-10-11T10:15:09.779Z

Updated: 2026-10-11T10:15:09.779Z

Reserved: 2026-10-10T15:14:21.530Z

Link: CVE-2026-108569

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-11T11:16:58.727

Modified: 2026-10-11T11:16:58.727

Link: CVE-2026-108569

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-11T11:30:17Z

Weaknesses

CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object