SQL Injection Vulnerability in View.html.php of CERT VDE Software

CVE-2026-40829

What is CVE-2026-40829?

The CERT VDE Software is vulnerable to an unauthenticated SQL Injection in the UpdateParam function located in view.html.php. This vulnerability stems from improper handling of special characters during SQL UPDATE commands, allowing a remote attacker with high privileges to read sensitive data and alter values in a non-critical database table. Exploiting this weakness can lead to significant breaches in data confidentiality and potential integrity issues, compromising the security posture of the affected systems.

References