Read the docs
TI-2026-70557 Aliases CVE-2026-108569GHSA-384j-rrq8-q3g3

SQL injection in Furion .NET Framework via String.Replace

Priority LOW 23CWE-74Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
SQL injection
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

Furion .NET Framework up to and including 4.9.9.92 is affected. The Name argument passed to the String.Replace function in StringRenderExtensions.cs is not neutralized before it reaches an SQL command (CWE-89). A remote attacker with low privileges can inject SQL through this argument, and a public exploit is available and might be used. The vendor did not respond to early disclosure contact.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00192 8th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Furion.NET Framework4.9.9.0; 4.9.9.1; 4.9.9.2; 4.9.9.3; 4.9.9.4; 4.9.9.5; 4.9.9.6; 4.9.9.7; 4.9.9.8; 4.9.9.9; 4.9.9.10; 4.9.9.11; 4.9.9.12; 4.9.9.13; 4.9.9.14; 4.9.9.15; 4.9.9.16; 4.9.9.17; 4.9.9.18; 4.9.9.19; 4.9.9.20; 4.9.9.21; 4.9.9.22; 4.9.9.23; 4.9.9.24; 4.9.9.25; 4.9.9.26; 4.9.9.27; 4.9.9.28; 4.9.9.29; 4.9.9.30; 4.9.9.31; 4.9.9.32; 4.9.9.33; 4.9.9.34; 4.9.9.35; 4.9.9.36; 4.9.9.37; 4.9.9.38; 4.9.9.39; 4.9.9.40; 4.9.9.41; 4.9.9.42; 4.9.9.43; 4.9.9.44; 4.9.9.45; 4.9.9.46; 4.9.9.47; 4.9.9.48; 4.9.9.49; 4.9.9.50; 4.9.9.51; 4.9.9.52; 4.9.9.53; 4.9.9.54; 4.9.9.55; 4.9.9.56; 4.9.9.57; 4.9.9.58; 4.9.9.59; 4.9.9.60; 4.9.9.61; 4.9.9.62; 4.9.9.63; 4.9.9.64; 4.9.9.65; 4.9.9.66; 4.9.9.67; 4.9.9.68; 4.9.9.69; 4.9.9.70; 4.9.9.71; 4.9.9.72; 4.9.9.73; 4.9.9.74; 4.9.9.75; 4.9.9.76; 4.9.9.77; 4.9.9.78; 4.9.9.79; 4.9.9.80; 4.9.9.81; 4.9.9.82; 4.9.9.83; 4.9.9.84; 4.9.9.85; 4.9.9.86; 4.9.9.87; 4.9.9.88; 4.9.9.89; 4.9.9.90; 4.9.9.91; 4.9.9.92—No fix listedCNA
  • .NET Framework VendorFurion Affected 4.9.9.0; 4.9.9.1; 4.9.9.2; 4.9.9.3; 4.9.9.4; 4.9.9.5; 4.9.9.6; 4.9.9.7; 4.9.9.8; 4.9.9.9; 4.9.9.10; 4.9.9.11; 4.9.9.12; 4.9.9.13; 4.9.9.14; 4.9.9.15; 4.9.9.16; 4.9.9.17; 4.9.9.18; 4.9.9.19; 4.9.9.20; 4.9.9.21; 4.9.9.22; 4.9.9.23; 4.9.9.24; 4.9.9.25; 4.9.9.26; 4.9.9.27; 4.9.9.28; 4.9.9.29; 4.9.9.30; 4.9.9.31; 4.9.9.32; 4.9.9.33; 4.9.9.34; 4.9.9.35; 4.9.9.36; 4.9.9.37; 4.9.9.38; 4.9.9.39; 4.9.9.40; 4.9.9.41; 4.9.9.42; 4.9.9.43; 4.9.9.44; 4.9.9.45; 4.9.9.46; 4.9.9.47; 4.9.9.48; 4.9.9.49; 4.9.9.50; 4.9.9.51; 4.9.9.52; 4.9.9.53; 4.9.9.54; 4.9.9.55; 4.9.9.56; 4.9.9.57; 4.9.9.58; 4.9.9.59; 4.9.9.60; 4.9.9.61; 4.9.9.62; 4.9.9.63; 4.9.9.64; 4.9.9.65; 4.9.9.66; 4.9.9.67; 4.9.9.68; 4.9.9.69; 4.9.9.70; 4.9.9.71; 4.9.9.72; 4.9.9.73; 4.9.9.74; 4.9.9.75; 4.9.9.76; 4.9.9.77; 4.9.9.78; 4.9.9.79; 4.9.9.80; 4.9.9.81; 4.9.9.82; 4.9.9.83; 4.9.9.84; 4.9.9.85; 4.9.9.86; 4.9.9.87; 4.9.9.88; 4.9.9.89; 4.9.9.90; 4.9.9.91; 4.9.9.92 Fixed in — No fix listed CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:*——Furion
  • cpe:2.3:a:furion:.net_framework:*:*:*:*:*:*:*:* Versions — — ·Furion

Remediation

The sources list no fixed version for Furion .NET Framework.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

  1. 2026-10-11 Threatist record created from CVE-2026-108569
  2. 2026-10-11 Alias added: GHSA-384j-rrq8-q3g3
  3. 2026-10-14 CISA SSVC decision points changed

References

—

  • TI-2026-70558 Furion .NET Framework RunCompile improper neutralization in template engine CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences