Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-71231: IOTSmartHome: Unauthenticated SQL Injection via Cookie
CVE-2026-71231
CVE-2026-71231
Summary
IOTSmartHome's login system is vulnerable to a security attack that allows an unauthorized user to access user data. This is because the system doesn't properly check the data sent by the user's browser, allowing an attacker to inject malicious code. To fix this, IOTSmartHome needs to update their system to properly validate the data sent by the user's browser.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| thebradleysanders | iotsmarthome | All versions |
Original title
IOTSmartHome: Unauthenticated SQL Injection via lastLogin Cookie
Original description
IOTSmartHome's gui/login.php checkCookie() function builds an authentication query as SELECT * FROM users WHERE ID='<decoded lastLogin cookie>' after base64-decoding the client-supplied lastLogin cookie via safe_decode(), which performs URL-safe base64 decoding with no sanitization of the decoded value before it is concatenated into the SQL string. An unauthenticated attacker can set a lastLogin cookie containing a base64-encoded SQL injection payload (e.g. base64("' OR '1'='1")) to bypass authentication and, via UNION-based injection, extract arbitrary data including user credentials.
nvd CVSS3.1
9.8
Vulnerability type
CWE-89
SQL Injection
Published: 5 Aug 2026 · Updated: 5 Aug 2026 · First seen: 5 Aug 2026