{"id":"CVE-2026-114358","kind":"vulnerability","aliases":["CVE-2026-114358"],"related":[],"title":"Radius Xenia M2M Platform: SQL injection in password recovery exposes database","description":"This\nvulnerability exists in the Radius\nXenia M2M Platform due to insufficient validation of user supplied input in\nthe password recovery functionality in the web management interface. An\nunauthenticated remote attacker could exploit this vulnerability by supplying\ncrafted SQL query through input fields to the targeted system. \n\n\n\nSuccessful exploitation of this vulnerability\ncould allow the attacker to gain unauthorized access to sensitive information,\nenumerate database structure or modify database records on the targeted system.","summary":"The Radius Xenia M2M Platform does not validate input in its web management password recovery function. An unauthenticated remote attacker can send crafted SQL through input fields to read sensitive data, enumerate the database structure, or modify records.","severity":"critical","cvss":9.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","m2m","radius-xenia","sql-injection","unauthenticated","web-management"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-29T09:17:07+00:00","first_seen_at":"2026-10-29T09:23:58+00:00","triaged_at":"2026-10-29T09:24:36+00:00","updated_at":"2026-10-29T09:25:23+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-10-29T09:24:36Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Radius Xenia M2M Platform: SQL injection in password recovery exposes database","impact":"high","summary":"The Radius Xenia M2M Platform does not validate input in its web management password recovery function. An unauthenticated remote attacker can send crafted SQL through input fields to read sensitive data, enumerate the database structure, or modify records.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["radius-xenia","m2m","web-management"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker reads sensitive data and modifies database records","analyst_note":"Find the affected version ranges and vendor advisory; source NVD page https://nvd.nist.gov/vuln/detail/CVE-2026-114358 has no version or fix details.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations running the Radius Xenia M2M Platform with its web management interface reachable from the network. The sources do not describe which versions are affected or which deployments expose the password recovery page.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000643,"input_tokens":4189,"output_tokens":449,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the affected version ranges and vendor advisory; source NVD page https://nvd.nist.gov/vuln/detail/CVE-2026-114358 has no version or fix details.","search":"'-114358':14A,17A '-2026':13A,16A 'access':127C 'allow':121C 'attack':49B,98C,123C 'could':99C,120C 'craft':52B,105C 'cve':12A,15A 'data':60B 'databas':11A,63B,132C,136C 'due':77C 'enumer':61B,131C 'exist':70C 'exploit':100C,116C 'expos':10A 'field':56B,110C 'function':45B,89C 'gain':125C 'inform':130C 'infrastructur':18B 'inject':6A,25B 'input':38B,55B,84C,109C 'insuffici':79C 'interfac':94C 'm2m':3A,19B,33B,75C 'manag':29B,42B,93C 'modifi':66B,135C 'password':8A,43B,87C 'platform':4A,34B,76C 'queri':107C 'radius':1A,21B,31B,73C 'radius-xenia':20B 'read':58B 'record':67B,137C 'recoveri':9A,44B,88C 'remot':48B,97C 'send':51B 'sensit':59B,129C 'sql':5A,24B,53B,106C 'sql-inject':23B 'structur':64B,133C 'success':115C 'suppli':83C,104C 'system':114C,141C 'target':113C,140C 'unauthent':26B,47B,96C 'unauthor':126C 'user':82C 'valid':37B,80C 'vulner':69C,102C,119C 'web':28B,41B,92C 'web-manag':27B 'xenia':2A,22B,32B,74C","nicknames":[],"mitigations":[],"who_affected":"Organizations running the Radius Xenia M2M Platform with its web management interface reachable from the network. The sources do not describe which versions are affected or which deployments expose the password recovery page.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T09:17:07+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"vdisclose@cert-in.org.in","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114358","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114358","severity":null,"published_at":"2026-10-29T09:17:07+00:00","modified_at":"2026-10-29T09:17:07+00:00","first_seen_at":"2026-10-29T09:23:58+00:00","fetched_at":"2026-10-29T09:23:58+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-114358:1006","url":null,"severity":null,"published_at":"2026-10-29T09:25:23+00:00","modified_at":"2026-10-29T09:25:23+00:00","first_seen_at":"2026-10-29T09:25:23+00:00","fetched_at":"2026-10-29T09:25:23+00:00","note":"No vendor/maintainer advisory found (searched web for Radius Xenia/myxenius and CISA ICS; NVD page returns no version or fix data). Versions, fix, and exploitation status unknown; vendor portal res.myxenius.com has a forgot_password page but no advisory. Settle by vendor contact or a CISA/CERT advisory."}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}