NuytsTech Security

CVE-2026-40830

by ·

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.

More information : https://www.certvde.com/en/advisories/VDE-2026-044/

Tags: