CVE-2026-40828

CVE-2026-40828 describes an unauthenticated SQL injection in the DeleteSysLogEntry function, enabling a high-privilege remote attacker to read the entire database and delete entries in a non-critical table. Affected impact includes total confidentiality loss and some integrity loss. CVSS metrics ...