CVE-2026-6888

7.2 Élevée

Publiée le 13/05/2026 à 06:17 · Modifiée le 17/06/2026 à 13:01 · En attente d'analyse NVD · Source : 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Description

Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the database.

Traduire en français

Produits concernés

Advantech SaaS Composer
Advantech IoTSuite Growth Linux docker
Advantech IoTSuite Starter Linux docker
Advantech IoT Edge Linux docker
Advantech IoT Edge Windows
Advantech WebAccess/SCADA
Advantech WebAccess SaaS-Composer
Advantech ECOWatch SaaS-Composer

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.2 Élevée	5f57b9bf-260d-4433-bf07-b6a79e9bb7d4	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-89

Références

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-050/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories