Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.3%	CVE-2026-115328json-scada · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in riclolsen… High8.7EPSS 0.3%2026-10-22CVE Database V5CVE-2026-115328 JSON-SCADA versions before 0.65-alpha contain an SQL injection vulnerability in the opcApi() function within src/server_realtime_auth/index.js. This flaw allows authenticated users to inject SQL commands via HistoryReadRequest parameters, specifically through NodeId.Id, StartTime, or EndTime fields. Exploitation can lead to unauthorized reading, modification, or deletion of historian data across all locations regardless of user role. EPSS 0.3%Vulnerability riclolsen #ghsa-6wf3-ww94-h8pr	CVE Database V5	2026-10-22

Showing 1–1 of 1 result