{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "incident": {
    "id": "cve-2026-114358",
    "url": "https://cveboard.org/i/cve-2026-114358",
    "urlPt": "https://cveboard.org/pt/i/cve-2026-114358",
    "json": "https://cveboard.org/i/cve-2026-114358.json",
    "kind": "vuln",
    "live": true,
    "knownExploited": false,
    "severity": "critical",
    "title": "Radius Synergies Radius Xenia M2M Platform",
    "summary": "This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface.",
    "titlePt": "Radius Synergies Radius Xenia Plataforma M2M",
    "summaryPt": "Esta vulnerabilidade existe na Plataforma Radius Xenia M2M devido à validação insuficiente de entrada fornecida pelo usuário na funcionalidade de recuperação de senha na interface de gerenciamento web.",
    "affected": [
      {
        "vendor": "Radius Synergies",
        "product": "Radius Xenia M2M Platform",
        "defaultStatus": "unaffected",
        "versions": [
          {
            "version": "Version",
            "status": "affected",
            "lessThan": null,
            "lessThanOrEqual": null
          }
        ],
        "omitted": 0,
        "fixed": []
      }
    ],
    "omitted": 0,
    "references": [],
    "cwes": [
      {
        "id": "CWE-89",
        "name": "Improper neutralization of special elements used in an SQL command ('SQL injection')"
      }
    ],
    "ssvc": null,
    "fix": "none",
    "tags": [
      "radius-synergies"
    ],
    "description": "This\nvulnerability exists in the Radius\nXenia M2M Platform due to insufficient validation of user supplied input in\nthe password recovery functionality in the web management interface. An\nunauthenticated remote attacker could exploit this vulnerability by supplying\ncrafted SQL query through input fields to the targeted system. \n\n\n\nSuccessful exploitation of this vulnerability\ncould allow the attacker to gain unauthorized access to sensitive information,\nenumerate database structure or modify database records on the targeted system.",
    "descriptionFrom": "cve",
    "descriptionAt": null,
    "summaryFrom": "cve",
    "cves": [
      "CVE-2026-114358"
    ],
    "ghsa": null,
    "cvss": {
      "score": 9.3,
      "version": "4.0",
      "by": "CERT-In"
    },
    "epss": null,
    "packages": [],
    "vendor": "Radius Synergies",
    "product": "Radius Xenia M2M Platform",
    "kev": null,
    "breach": null,
    "retracted": false,
    "sources": [
      {
        "label": "cve.now",
        "url": "https://cve.now/CVE-2026-114358"
      }
    ],
    "cveVersion": 1,
    "cvePending": false,
    "publishedAt": "2026-10-29T08:53:05.549Z",
    "updatedAt": "2026-10-29T08:53:05.549Z"
  },
  "live": true,
  "events": [
    {
      "id": "cvenow:CVE-2026-114358:cvenow_discovered:first",
      "incidentId": "cve-2026-114358",
      "type": "cvenow_discovered",
      "at": "2026-10-29T08:53:05.549Z",
      "detail": {}
    }
  ]
}