Radius Xenia M2M Platform SQL injection flaw (CVE-2026-114358) disclosed by KSRC
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Radius
- Product
- Xenia M2M Platform
- First seen
Summary
KSRC's security advisory KSRC-2026-10302 reports a critical SQL injection vulnerability in Radius Synergies' Xenia M2M Platform, scored CVSS v4.0 9.3. According to the advisory, an unauthenticated remote attacker could exploit it through the password recovery function to access sensitive information, enumerate the database, or modify records.
If you use Radius
Check whether your deployment runs the Radius Xenia M2M Platform and identify its version.
Restrict access to the web management interface, especially the password recovery function, until a vendor fix is confirmed.
Monitor for unusual database queries and password recovery requests.
Follow Radius Synergies' guidance and apply any patch once released.
What the sources say 1
· Mastodon: “A # critical # SQL Injection # vulnerability has been identified in the Radius Xenia M2M Platform developed by Radius Synergies.” Source