CVE-2026-108065Vulnerability
Reported by 2 independent sources · first reported by Rapid7 · last reported
Last reported 9 days ago
EPSS0.8%
higher than 54% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 54% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More“Rapid7 has disclosed details of a critical SQL Injection vulnerability in Channel Software WebAlliance eCommerce (CVE-2026-108065, CVSS score: 9.8).”
-
Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce“While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability (CWE-89) in Channel Software WebAlliance eCommerce.The exploit allows a malicious actor to read sensitive data from the dat…”
Indicators reported together
named in the same reports- hxxp://tempuri[.]org/GetUserin 1 report
- tempuri[.]orgin 1 report
- hxxp://tempuri[.]org/in 1 report
- hxxp://tempuri[.]org/GetCustomerin 1 report
- easyllms[.]xyzin 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2026-0257, CVE-2026-79610, CVE-2026-110392, CVE-2026-47595, CVE-2026-106931, CVE-2026-101341, CVE-2026-101339, CVE-2026-101338, CVE-2026-101337
Thanks — we review every report.