Radius Synergies vulnerabilities and threats

CVE-2026-114358 is a critical SQL injection vulnerability in the Radius Xenia M2M Platform's password recovery functionality. It arises from insufficient validation of user input in the web management interface, allowing unauthenticated remote attackers to inject crafted SQL queries. Exploitation can lead to unauthorized access to sensitive data, database enumeration, or modification of database records.