VYPR

IOTSmartHome

by Thebradleysanders

CVEs (1)

  • CVE-2026-71231Aug 5, 2026
    risk 0.00cvss epss

    IOTSmartHome's gui/login.php checkCookie() function builds an authentication query as SELECT * FROM users WHERE ID='' after base64-decoding the client-supplied lastLogin cookie via safe_decode(), which performs URL-safe base64 decoding with no…