CVE-2026-40818

An unauthenticated SQL Injection exists in the _mb24confi_getDevice function due to improper neutralization of special elements in a SQL SELECT command. This vulnerability allows remote attackers to access confidential data, as indicated by a HIGH impact on confidentiality. The CVE entries do not...