Unknown · Smart Integrated Management Platform System · CVE-2026-2820
**Name of the Vulnerable Software and Affected Versions**
Fujian Smart Integrated Management Platform System versions up to 7.5
**Description**
A security flaw exists in Fujian Smart Integrated Management Platform System up to version 7.5. The issue involves improper processing of files, specifically `/Module/CRXT/Controller/XAccessPermissionPlus.ashx`. Manipulation of the `DeviceIDS` argument can lead to a SQL injection attack, potentially allowing remote exploitation. The exploit for this issue has been publicly released.
**Recommendations**
Versions prior to 7.5 should be updated.