CVE-2026-71231: Improper Neutralization of Special Elements used in an SQL Command

IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT FROM users WHERE ID=' ' after base64-decoding the client-supplied lastLogin cookie via safedecode, which performs URL-safe base64 decoding with no sanitization of the decoded value before it is concatenated...