CVE-2026-75336

CriticalCVSS 9.8

Published: 26/08/2026(UTC)Updated: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.

An attacker can exploit SQL injection to manipulate the database, potentially leading to unauthorized access, modification, or deletion of data.

It is recommended to use parameterized queries or prepared statements in these interfaces and validate input data.

Original NVD description (English source)

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.