CVE-2026-75336

Funiture 1.0.0 is susceptible to SQL Injection through its backend tool management interfaces, specifically /sys/tool/select.json and /sys/tool/update.json . An attacker able to reach these endpoints could manipulate SQL queries to read, modify, or delete data in the underlying database. No CVSS ...