Control System

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Control System records in CISA KEV

No Control System vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2026-26482 CVE-2026-34185 · GHSA-p6w4-7rrj-xwqx

MEDIUM 45

AlanWeb SCADA is vulnerable to SQL Injection across most scripts and input parameters.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00295 Published 2026-04-09 Fixed in 9.8.5 CWE-89

TI-2026-26481 CVE-2026-34184 · GHSA-hh72-xj72-2c38

MEDIUM 44

AlanWeb SCADA does not enforce authorization for some directories.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00299 Published 2026-04-09 Fixed in 9.8.5 CWE-862

TI-2026-04271 CVE-2026-4901 · GHSA-f43w-3fr5-h2m3

LOW 36

AlanWeb SCADA saves sensitive information into a log file.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00269 Published 2026-04-09 Fixed in 9.8.5 CWE-532