Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Low | 2.1 | CVE-2026-115803 |
A flaw has been found in Scada-LTS 2.8.0
Scada-LTS, AmChartsScada-LTS, AmCharts Data API
|
NVD | |||
|
CVE-2026-115803A flaw has been found in Scada-LTS 2.8.0
Executive summaryA flaw has been found in Scada-LTS version 2.8.0, an industrial control system monitoring product. The advisory says the flaw can allow authorization bypass and that a public exploit has been published. The vendor says a new release with security enhancements is in development but has not yet been released. Technical summaryThe weakness is an authorization bypass in the AmCharts Data API component, specifically in the AmChartValuesAPI.java file where HttpServletRequest.getParameter handles the ids argument. The attack can be launched remotely by manipulating the ids argument; the advisory does not state any authentication preconditions. Affected versions are stated as Scada-LTS 2.8.0 only, and no fixed version is stated. The vendor says a new release with security enhancements is in progress and will be introduced soon. No workaround, detection guidance, CVSS score, or in-the-wild exploitation status is stated, though the advisory says an exploit has been published and may be used. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploitedConfidentialityLow IntegrityNone AvailabilityNone
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||