Search vulnerabilities

Results 1

Export CSV
CVE-2026-16462

SQL injection via unauthenticated GetGridData endpoint

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Products