Skip to content

Menu
  • Home
Menu

CVE-2026-24494 – SQL injection vulnerability in Order Up Online Ordering System

Posted on February 23, 2026
CVE ID : CVE-2026-24494

Published : Feb. 23, 2026, 2:16 a.m. | 29 minutes ago

Description : SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

©2026 | Design: Newspaperly WordPress Theme