CVE-2026-40838

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-40838 Authenticated SQLi in getDeviceScalings function

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

CVE-2026-40838

CVE-2026-40838 involves an unauthenticated SQL injection in the getDeviceScalings function. An attacker with low privileges and remote access can exploit improper neutralization of special elements in a SQL SELECT command, leading to total confidentiality loss. The CVSS metrics indicate Network a...