Home / Vulnerability Intelligence / CVE-2026-24494

CVE-2026-24494 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: February 23, 2026

Order Up Online Ordering System - SQL Injection

Published: February 23, 2026Updated: February 23, 2026Remote Exploitable

Overview

Order Up Online Ordering System 1.0 contains a SQL injection caused by unsanitized store_id parameter in /api/integrations/getintegrations endpoint, letting unauthenticated attackers access sensitive backend database data.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 5.2%(Probability of exploitation in next 30 days)

Impact

Unauthenticated attackers can access sensitive backend database data, potentially leading to data disclosure or manipulation.

Mitigation

Update to the latest version.

References

https://www.spartanssec.com/post/multiple-unauthenticated-sql-injection-vulnerabilities

Social Media Activity(2 posts)

Offensive Sequence

@offseq

Feb 23, 2026

⚠️ CVE-2026-24494 (CRITICAL, CVSS 9.8): SQL Injection in Order Up Online Ordering System v1.0 lets unauthenticated attackers run arbitrary SQL via /api/integrations/getintegrations. Patch or mitigate now! https://radar.offseq.com/threat/cve-2026-24494-cwe-89-improper-neutralization-of-s-fae4075c #OffSeq #SQLInjection #Vulnerability #Infosec

View original post

TheHackerWire

@thehackerwire

Feb 23, 2026

🔴 CVE-2026-24494 - Critical (9.8) SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24494/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-24494
Severity: Critical
CVSS Score: 9.8
Type: sql_injection
Status: unconfirmed
EPSS: 5.2%
Social Posts: 2

CWE

CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

5.2%Probability of exploitation in the next 30 days