Threats Tagged 'cve-2026-9852'
View all threats tagged with 'cve-2026-9852'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-9852'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-9852: CWE-1236 Improper neutralization of formula elements in a CSV file in Hitachi Energy MicroSCADA SYS600CVE-2026-9852 0 A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue attackers would need a way to create arbitrary log messages. This could be achieved through normal functionality via SCIL scripts, a log injection vulnerability, or via the SYS600 broker. This vulnerability affects all Windows users regardless of their privilege level who can run the Notify service and export the log. Join the discussion | CVE Database V5 | 09/03/2026, 07:53:06 UTC Added: 09/03/2026, 08:07:54 UTC |
Showing 1 to 1 of 1 result