CVE-2026-16462
SQL injection via unauthenticated GetGridData endpoint
In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.
CVSS 4.0 · 9.3 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products