CVE-2026-78310
MediumCVSS 4.3Summary
Authorization bypass through a user-controlled key exists in DIAEnergie. The issue affects versions before 1.11.00.022.
Risk Assessment
An attacker could gain access to resources or functions they are not authorized for, potentially leading to unauthorized operations.
Recommendation
Update DIAEnergie to version 1.11.00.022 or later.
Other vulnerabilities in DIAEnergie
See all- CVE-2026-78312Critical
Path Traversal vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to access files outside the intended directory.
- CVE-2026-78308Critical
Improper Authentication vulnerability in DIAEnergie before version 1.11.00.022 allows authentication bypass.
- CVE-2026-78313Medium
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. The vulnerability may allow unauthorized users to access functions or data they should not have access to.
- CVE-2026-78311High
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
- CVE-2026-78309High
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
Original NVD description (English source)
Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.