Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-114358 EUVD-2026-112677GHSA-cgx5-hf2m-237r

SQL Injection Vulnerability in Radius Xenia M2M Platform

Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by CERT-In

Description

This
vulnerability exists in the Radius
Xenia M2M Platform due to insufficient validation of user supplied input in
the password recovery functionality in the web management interface. An
unauthenticated remote attacker could exploit this vulnerability by supplying
crafted SQL query through input fields to the targeted system. 

Successful exploitation of this vulnerability
could allow the attacker to gain unauthorized access to sensitive information,
enumerate database structure or modify database records on the targeted system.

Affected products

VendorProductAffectedFixed
Radius Synergies Radius Xenia M2M Platform Version —

References