Futurum Software vulnerabilities

Products

• Futurum Software User Authentication Module 1

Latest Futurum Software CVEs

Newest publication first

1. CVE-2026-14571 SQL injection (SQLi) in the user authentication module of Futurum Software

   Published 2026-10-28

   Critical·CVSS 9.1 EPSS 0.25%

   A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation and sanitisation of user-provided inputs in queries to the private area’s database, as well as by an incorrect WAF configuration. This weakness allows the protec...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.