Order Up vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Order Up products: 1 record(s), with severity, exploitation and fixes.

Online Ordering System 1

Exploited only (KEV) →

CVE-2026-24494 Critical · 9.8 CWE-89 Feb 22, 2026

SQL injection vulnerability in Order Up Online Ordering System

SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.