CVE-2026-2820 | Fujian Smart Integrated Management Platform System up to 7.5 XAccessPermissionPlus.ashx DeviceIDS sql injection

February 19, 2026 Yanac

A vulnerability labeled as critical has been found in Fujian Smart Integrated Management Platform System up to 7.5. This issue affects some unknown processing of the file /Module/CRXT/Controller/XAccessPermissionPlus.ashx. The manipulation of the argument DeviceIDS results in sql injection.

This vulnerability is cataloged as CVE-2026-2820. The attack may be launched remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More