3 matches found
CVE-2026-40820
A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function. The root cause is the improper neutralization of special elements within a SQL SELECT command, which can lead to a total loss of confidentiality . No specific exploit code or r...
CVE-2026-40820 Authenticated SQLi in getVpnData function
A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...
EUVD-2026-124328
A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...