Futurum Software User Authentication Module
Approved changes feed: RSS · Atom
cpe:2.3:a:futurum_software:futurum_software_user_authentication_module:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Futurum Software (fd65d726-a2ff-5aff-8b85-1e9a7ec3db30) |
|---|---|
| Product | Futurum Software User Authentication Module (58c94fab-981a-5055-859e-4e0dc7299a5b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14571 |
vulnerable | 2026-11-03 10:16:32.667105 |
SQL injection (SQLi) in the user authentication module of Futurum Software
A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation and sanitisation of user-provided inputs in queries to the private area’s database, as well as by an incorrect WAF configuration. This weakness allows the protection mechanisms to be bypassed solely by sending manipulated HTTP requests. Successful exploitation of the vulnerability could allow an unauthenticated attacker to execute arbitrary queries against the database, extract its complete structure and gain access to sensitive customer information, including personally identifiable information (PII).
Published: 2026-10-28T09:15:03.663Z
Updated: 2026-11-05T17:07:54.207Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.