CVE-2026-78309
HighCVSS 8.8Summary
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
Risk Assessment
An attacker can gain unauthorized access to the database, modify data, or perform administrative operations, potentially leading to data breach.
Recommendation
Update DIAEnergie to version 1.11.00.022 or later, which includes the fix.
Other vulnerabilities in DIAEnergie
See all- CVE-2026-78312Critical
Path Traversal vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to access files outside the intended directory.
- CVE-2026-78308Critical
Improper Authentication vulnerability in DIAEnergie before version 1.11.00.022 allows authentication bypass.
- CVE-2026-78313Medium
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. The vulnerability may allow unauthorized users to access functions or data they should not have access to.
- CVE-2026-78311High
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
- CVE-2026-78310Medium
Authorization bypass through a user-controlled key exists in DIAEnergie. The issue affects versions before 1.11.00.022.
Original NVD description (English source)
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.