CVE-2026-71231 — IOTSmartHome - Unauthenticated SQL Injection via lastLogin Cookie
IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID='<decoded lastLogin cookie>' after base64-decoding the client-su…
Published: 2026-08-05 · CVSS: 9.8 · CVSS 3.1
IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID='<decoded lastLogin cookie>' after base64-decoding the client-supplied lastLogin cookie via safe_decode, which performs URL-safe base64 decoding with no sanitization of the decoded value before it is concatenated into the SQL string.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7