CVE-2026-4901 — Insertion of Sesitive Information into Log File in AlanWeb SCADA

CVE-2026-4901

Insertion of Sesitive Information into Log File in AlanWeb SCADA PUBLISHED

Description (CNA)

AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthorized user. This issue was fixed in AlanWeb SCADA version 9.8.5

Affected (CNA)

Vendor / product	Versions
Control System / AlanWeb SCADA	affected 0 before 9.8.5

CWE

CWE-532

References

https://cert.pl/posts/2026/04/CVE-2026-4901/
https://control-system.pl/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.