Threats tagged 'ghsa-hhm3-8qg5-w88f'

CVE-2026-40820 is an unauthenticated SQL Injection vulnerability in the getVpnData function that can be exploited by a high privileged remote attacker. The flaw arises from improper neutralization of special elements in a SQL SELECT command, potentially leading to total loss of confidentiality. The vulnerability has a medium severity score of 4.9 and does not affect availability or integrity. No affected software versions or patches are specified.