{"id":"CVE-2026-78182","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-78182","summary":"A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans…","details":"A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argument order/sort leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.","published":"2026-08-24T04:16:59.040","modified":"2026-08-24T04:16:59.040","cvss":{"score":7.3,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://ucn9h68n9289.feishu.cn/docx/WgJYd7q4CopTQKxqWuWcJEpinde?from=from_copylink"},{"type":"WEB","url":"https://vuldb.com/cve/CVE-2026-78182"},{"type":"WEB","url":"https://vuldb.com/submit/885103"},{"type":"WEB","url":"https://vuldb.com/vuln/394566"},{"type":"WEB","url":"https://vuldb.com/vuln/394566/cti"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-24T04:16:59.040"}}