CVE-2026-114358
CRITICAL—CVSS v3
—CVSS v2
0.50%
EPSS (exploit probability)
CWE-89CWE
Description
This
vulnerability exists in the Radius
Xenia M2M Platform due to insufficient validation of user supplied input in
the password recovery functionality in the web management interface. An
unauthenticated remote attacker could exploit this vulnerability by supplying
crafted SQL query through input fields to the targeted system.
Successful exploitation of this vulnerability
could allow the attacker to gain unauthorized access to sensitive information,
enumerate database structure or modify database records on the targeted system.
Affected routers (0)
No routers currently mapped to this CVE in our database.