CVE-2026-9065 | brainstormforce Surecart up to 4.2.0 REST API Endpoint integrations model_name/model_id/integration_id/provider sql injection

A vulnerability, which was classified as critical, has been found in brainstormforce Surecart up to 4.2.0. This issue affects some unknown processing of the file /surecart/v1/integrations/ of the component REST API Endpoint. The manipulation of the argument model_name/model_id/integration_id/provider leads to sql injection.

This vulnerability is documented as CVE-2026-9065. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.