CVE-2026-42097 — Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST request allowing SQL que — CVE Database · The Intelligence Room