---
id: CVE-2026-114358
title: SQL Injection Vulnerability in Radius Xenia M2M Platform
summary: |-
  This
  vulnerability exists in the Radius
  Xenia M2M Platform due to insufficient validation of user supplied input in
  the password recovery functionality in the web management interface. An
  unauthenticated remote attacker could exploit thi…
severity: critical
cvss: 9.3
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-89
vendor: Radius Synergies
product: Radius Xenia M2M Platform
affected:
  - radius_xenia_m2m_platform Version
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-29T14:13:39.146085Z'
published: '2026-10-29'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T14:13:51.533Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-114358'
references:
  - url: >-
      https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0529
tags:
  - cve.org
epss: 0.00502
epssPercentile: 0.43095
ingestedAt: '2026-11-01T20:00:16.935Z'
---

## Overview

This
vulnerability exists in the Radius
Xenia M2M Platform due to insufficient validation of user supplied input in
the password recovery functionality in the web management interface. An
unauthenticated remote attacker could exploit this vulnerability by supplying
crafted SQL query through input fields to the targeted system. 



Successful exploitation of this vulnerability
could allow the attacker to gain unauthorized access to sensitive information,
enumerate database structure or modify database records on the targeted system.

## Affected

- `radius_xenia_m2m_platform Version`

## Remediation

Contact
vendor for the patched version.