CVE 7.2 HIGH

SQL Injection Vulnerability_CVE-2026-6888

7.2 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to
execute arbitrary commands via a specific interface,
potentially enabling the attacker to access, modify, or delete sensitive
information within the database.

Basic Information

ID CVE-2026-6888
Source CSA
Published May 13, 2026 at 03:16

Affected Product

Vendor Advantech
Product SaaS Composer
Version prior to version 3.4.17
Affected Versions Advantech SaaS Composer prior to version 3.4.17
Advantech IoTSuite Growth Linux docker prior to version 2.2.0
Advantech IoTSuite Starter Linux docker prior to version 2.2.0
Advantech IoT Edge Linux docker prior to version 2.2.0
Advantech IoT Edge Windows prior to version 2.2.0
Advantech WebAccess/SCADA prior to version 9.2.3
Advantech WebAccess SaaS-Composer prior to version 3.4.17.1
Advantech ECOWatch SaaS-Composer prior to version 3.4.17

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.