CVE-2026-16462

SQL injection via unauthenticated GetGridData endpoint PUBLISHED

Description (CNA)

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.

Affected (CNA)

Vendor / product	Versions
Weidmueller Interface / PROCON-WEB SCADA	affected 1.0.0 through 6.11.2

CWE

CWE-89

References

https://www.certvde.com/en/advisories/VDE-2026-085/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.