CVE-2026-75336

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.

• Published Aug 26, 2026
• CVSS 9.8 critical
• 0.5% chance of exploitation in the next 30 days (EPSS)

CVE-2026-75336 at the National Vulnerability Database