Channel Software vulnerabilities

Products

• WebAlliance eCommerce 1

Latest Channel Software CVEs

Newest publication first

1. CVE-2026-108065 Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce

   Published 2026-10-14

   Critical·CVSS 9.8

   SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.