Vulnerabilities

TI-2026-26482 CVE-2026-34185 · GHSA-p6w4-7rrj-xwqx

SQL Injection in AlanWeb SCADA

MEDIUM 45

AlanWeb SCADA is vulnerable to SQL Injection across most scripts and input parameters.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00295 Published 2026-04-09 Fixed in 9.8.5 CWE-89

TI-2026-26481 CVE-2026-34184 · GHSA-hh72-xj72-2c38

MEDIUM 44

AlanWeb SCADA does not enforce authorization for some directories.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00299 Published 2026-04-09 Fixed in 9.8.5 CWE-862

TI-2026-04271 CVE-2026-4901 · GHSA-f43w-3fr5-h2m3

LOW 36

AlanWeb SCADA saves sensitive information into a log file.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00269 Published 2026-04-09 Fixed in 9.8.5 CWE-532