CVE-2026-40820

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function. The root cause is the improper neutralization of special elements within a SQL SELECT command, which can lead to a total loss of confidentiality . No specific exploit code or r...