CVE Catalog
CVE-2026-16462
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.42%
35th percentile - higher than 35% of all known CVEs
Summary
In PROCON-WEB SCADA, the 'GetGridData' endpoint is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.
Risk Assessment
An attacker can gain unauthorized access to the database, read or modify sensitive data, and potentially take control of the SCADA system.
Recommendation
Update PROCON-WEB SCADA to a version that fixes input validation in the 'GetGridData' endpoint.
Original NVD description (English source)
In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.