CVE-2026-78182 | Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300 plansImmediate PlanController.getImmediatePlans order/sort sql injection

August 23, 2026 Yanac

A vulnerability has been found in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300 and classified as critical. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argument order/sort leads to sql injection.

This vulnerability is referenced as CVE-2026-78182. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More