CVE-2026-24494 - SQL injection vulnerability in Order Up Online Ordering System

CVE ID : CVE-2026-24494 Published : Feb. 23, 2026, 1:24 a.m. | 36 minutes ago Description : SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...