Live › vulnerability › CVE-2026-114358
The Radius Xenia M2M Platform does not validate input in its web management password recovery function. An unauthenticated remote attacker can send crafted SQL through input fields to read sensitive data, enumerate the database structure, or modify records.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 09:23 UTC. All times on this page are UTC.
Organizations running the Radius Xenia M2M Platform with its web management interface reachable from the network. The sources do not describe which versions are affected or which deployments expose the password recovery page.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted SQL query through input fields to the targeted system.
Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to sensitive information, enumerate database structure or modify database records on the targeted system.
This page as .md · .json · in your agent: get_signal("CVE-2026-114358")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.