CVE-2026-78308
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Improper Authentication vulnerability in DIAEnergie before version 1.11.00.022 allows authentication bypass.
Risk Assessment
An attacker can gain unauthorized access to the system, potentially leading to data breach and system integrity compromise.
Recommendation
Update DIAEnergie to version 1.11.00.022 or later, which includes the fix.
Other vulnerabilities in DIAEnergie
See all- CVE-2026-78312Critical
Path Traversal vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to access files outside the intended directory.
- CVE-2026-78313Medium
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. The vulnerability may allow unauthorized users to access functions or data they should not have access to.
- CVE-2026-78311High
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
- CVE-2026-78310Medium
Authorization bypass through a user-controlled key exists in DIAEnergie. The issue affects versions before 1.11.00.022.
- CVE-2026-78309High
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
Original NVD description (English source)
Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.