CVE-2026-71231 Details

An authentication bypass vulnerability has been identified in IOTSmartHome's login.php file. The issue arises in the checkCookie() function, which constructs an SQL query by selecting users based on a decoded lastLogin cookie. The decoding process, handled by safe_decode(), does not sanitize the value before it is used in the SQL query, creating an opportunity for SQL injection. An unauthenticated attacker can exploit this by sending a lastLogin cookie with a base64-encoded SQL injection payload, such as base64-encoded SQL injection payload, such as base64(' OR '1'='1'). This injection can be used to bypass authentication and extract sensitive information, including user credentials, through UNION-based SQL injection.