CVE-2026-108570

Name of the Vulnerable Software and Affected Versions Furion .NET Framework versions prior to 4.9.9.96

Description A flaw in the View Engine component allows remote attackers to manipulate the content argument within the RunCompile() function of the framework/Furion/ViewEngine/Engines/ViewEngine.cs file. This leads to improper neutralization of special elements used in the template engine, which can be exploited to execute unauthorized actions remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the RunCompile() function to minimize the risk of exploitation.