← Database

CVE-2026-40820

MEDIUM CVSS: 4.9 Published: 2026-11-12 Modified: 2026-11-12

Description

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.

Affected Platforms

Unknown

Weakness Type

CWE-89

References