CVE Intelligence

Vulnerabilidades de Order Up

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Order Up: 1 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-24494 Crítica · 9.8 CWE-89 22/02/2026
SQL injection vulnerability in Order Up Online Ordering System
SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.