https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:15:01 +0000 https://vulnerability.circl.lu/vuln/cve-2026-84859 <p><strong>Affected:</strong> Scada-LTS</p> <p>ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection</p> <p>The /api/events/search endpoint accepts a JSON body containing a sortBy array. The values in this array are concatenated directly into the SQL ORDER BY clause without any sanitization or parameterization. This allows authenticated users with the ROLE_USER role to perform time-based and boolean-based blind SQL injection to extract arbitrary data from the database, including password hashes of all users.</p> <p>The endpoint is accessible to any authenticated user with ROLE_USER, ROLE_ADMIN, or ROLE_PUBLIC via POST /api/events/search as defined in spring-security.xml.</p> <p><strong>Affected:</strong> Scada-LTS</p> <p>ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection</p> <p>The /api/events/search endpoint accepts a JSON body containing a sortBy array. The values in this array are concatenated directly into the SQL ORDER BY clause without any sanitization or parameterization. This allows authenticated users with the ROLE_USER role to perform time-based and boolean-based blind SQL injection to extract arbitrary data from the database, including password hashes of all users.</p> <p>The endpoint is accessible to any authenticated user with ROLE_USER, ROLE_ADMIN, or ROLE_PUBLIC via POST /api/events/search as defined in spring-security.xml.</p> https://vulnerability.circl.lu/vuln/cve-2026-84859