CVE-2026-78313
MediumCVSS 6.5Summary
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. The vulnerability may allow unauthorized users to access functions or data they should not have access to.
Risk Assessment
An unauthorized user may gain access to protected functions or data. This may lead to a breach of confidentiality, integrity, or availability of the system.
Recommendation
Update DIAEnergie to version 1.11.00.022 or later. Review and strengthen access control mechanisms in the system.
Other vulnerabilities in DIAEnergie
See all- CVE-2026-78312Critical
Path Traversal vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to access files outside the intended directory.
- CVE-2026-78308Critical
Improper Authentication vulnerability in DIAEnergie before version 1.11.00.022 allows authentication bypass.
- CVE-2026-78311High
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
- CVE-2026-78310Medium
Authorization bypass through a user-controlled key exists in DIAEnergie. The issue affects versions before 1.11.00.022.
- CVE-2026-78309High
SQL Injection vulnerability in DIAEnergie before version 1.11.00.022. Allows an attacker to inject malicious SQL code into queries.
Original NVD description (English source)
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.