CVE-2026-78312
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Path Traversal vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to access files outside the intended directory.
Risk Assessment
An attacker can read sensitive files on the server, potentially leading to data disclosure or further system compromise.
Recommendation
Update DIAEnergie to version 1.11.00.022 or later, which includes the fix.
Other vulnerabilities in DIAEnergie
See all- CVE-2026-78308Critical
Improper Authentication vulnerability in DIAEnergie before version 1.11.00.022 allows authentication bypass.
- CVE-2026-78313Medium
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. The vulnerability may allow unauthorized users to access functions or data they should not have access to.
- CVE-2026-78311High
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
- CVE-2026-78310Medium
Authorization bypass through a user-controlled key exists in DIAEnergie. The issue affects versions before 1.11.00.022.
- CVE-2026-78309High
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
Original NVD description (English source)
Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.