SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-16462

CRITICAL · CVSS 9.8 EPSS 0.48%

Source: NVD + CISA KEV + EPSS · Published 2026-07-28 · Last synced 2026-08-27

CyberRota Analysis

AI-Generated

The vulnerability in PROCON-WEB SCADA allows remote unauthenticated attackers to execute arbitrary SQL commands through the improperly sanitized 'GetGridData' endpoint. This critical flaw poses a significant risk of data manipulation and unauthorized access to sensitive information. Organizations using PROCON-WEB SCADA should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-16462
Severity
CRITICAL
CVSS
9.8
EPSS
0.48%

Original NVD Description

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.