CVE-2026-40828

CVE-2026-40828 describes an unauthenticated SQL injection in the DeleteSysLogEntry function, enabling a high-privilege remote attacker to read the entire database and delete entries in a non-critical table. Affected impact includes total confidentiality loss and some integrity loss. CVSS metrics ...

CVE-2026-40828: Improper Neutralization of Special Elements used in an SQL Command

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DeleteSysLogEntry function due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can...