{
  "schemaVersion": 1,
  "site": "https://cveboard.org",
  "generatedAt": "2026-10-28T12:15:39.762Z",
  "lastRun": "2026-10-28T12:01:22.161Z",
  "liveDays": 14,
  "filters": {
    "kind": null,
    "exploited": false,
    "severity": null,
    "ecosystems": [],
    "tag": "futurum-software"
  },
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "incidents": [
    {
      "id": "cve-2026-14571",
      "url": "https://cveboard.org/i/cve-2026-14571",
      "urlPt": "https://cveboard.org/pt/i/cve-2026-14571",
      "json": "https://cveboard.org/i/cve-2026-14571.json",
      "kind": "vuln",
      "live": true,
      "knownExploited": false,
      "severity": "critical",
      "title": "Futurum Software Futurum Software User Authentication Module",
      "summary": "A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation and sanitisation of user-provided inputs in queries to the private area’s database, as well as by an incorrect WAF configuration.",
      "titlePt": "Módulo de autenticação de usuário da Futurum Software",
      "summaryPt": "Uma vulnerabilidade de Injeção SQL Cega no software de gerenciamento da Futurum Software, causada pela falta de validação e sanitização adequadas de entradas fornecidas pelo usuário em consultas ao banco de dados da área privada, bem como por uma configuração incorreta do WAF.",
      "affected": [
        {
          "vendor": "Futurum Software",
          "product": "Futurum Software User Authentication Module",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "status": "affected",
              "lessThan": "May 2026",
              "lessThanOrEqual": null
            }
          ],
          "omitted": 0,
          "fixed": [
            "May 2026"
          ]
        }
      ],
      "omitted": 0,
      "references": [],
      "cwes": [
        {
          "id": "CWE-89",
          "name": "Improper neutralization of special elements used in an SQL command ('SQL injection')"
        }
      ],
      "ssvc": null,
      "fix": "listed",
      "tags": [
        "futurum-software"
      ],
      "description": "A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation and sanitisation of user-provided inputs in queries to the private area’s database, as well as by an incorrect WAF configuration. This weakness allows the protection mechanisms to be bypassed solely by sending manipulated HTTP requests. Successful exploitation of the vulnerability could allow an unauthenticated attacker to execute arbitrary queries against the database, extract its complete structure and gain access to sensitive customer information, including personally identifiable information (PII).",
      "descriptionFrom": "cve",
      "descriptionAt": null,
      "summaryFrom": "cve",
      "cves": [
        "CVE-2026-14571"
      ],
      "ghsa": null,
      "cvss": {
        "score": 9.1,
        "version": "4.0",
        "by": "INCIBE"
      },
      "epss": null,
      "packages": [],
      "vendor": "Futurum Software",
      "product": "Futurum Software User Authentication Module",
      "kev": null,
      "breach": null,
      "retracted": false,
      "sources": [
        {
          "label": "cve.now",
          "url": "https://cve.now/CVE-2026-14571"
        }
      ],
      "cveVersion": 1,
      "cvePending": false,
      "publishedAt": "2026-10-28T09:15:03.663Z",
      "updatedAt": "2026-10-28T09:15:03.663Z"
    }
  ],
  "tag": {
    "tag": "futurum-software",
    "name": "Futurum Software",
    "kev": null
  }
}