Vulnerability details
CVE-2026-114358
Radius Synergies Radius Xenia M2M Platform
SQL Injection Vulnerability in Radius Xenia M2M Platform
CVSS 4.0
9.3Critical
Official description
This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted SQL query through input fields to the targeted system. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to sensitive information, enumerate database structure or modify database records on the targeted system.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.3Critical | 4.0 | CVEProject cvelistV5 (CNA) (CERT-In) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Radius Synergies | Radius Xenia M2M Platform | Version | CVEProject cvelistV5 (CNA) |
References and advisories
1- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0529 third-party-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-10-29
- Last updated
- 2026-10-29
- State
- Published
- Assigner (CNA)
- CERT-In
- Kolun priority
- 25 · Low
Exploit prediction (EPSS)
0.5%
Probability of exploitation in 30 days
43.2%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-89Improper neutralization of special elements used in an SQL command ('SQL injection')