CVE-2025-41771

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An authenticated attacker with low privileges can access an endpoint in the controller web interface that is vulnerable to SQL injection. This issue affects a SQLite database used exclusively for storing notification messages, limiting the impact to the system notification functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.