7.2
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to
execute arbitrary commands via a specific interface,
potentially enabling the attacker to access, modify, or delete sensitive
information within the database.
execute arbitrary commands via a specific interface,
potentially enabling the attacker to access, modify, or delete sensitive
information within the database.
Basic Information
ID
CVE-2026-6888
Source
CSA
Published
May 13, 2026 at 03:16
Affected Product
Vendor
Advantech
Product
SaaS Composer
Version
prior to version 3.4.17
Affected Versions
Advantech SaaS Composer prior to version 3.4.17
Advantech IoTSuite Growth Linux docker prior to version 2.2.0
Advantech IoTSuite Starter Linux docker prior to version 2.2.0
Advantech IoT Edge Linux docker prior to version 2.2.0
Advantech IoT Edge Windows prior to version 2.2.0
Advantech WebAccess/SCADA prior to version 9.2.3
Advantech WebAccess SaaS-Composer prior to version 3.4.17.1
Advantech ECOWatch SaaS-Composer prior to version 3.4.17
Advantech IoTSuite Growth Linux docker prior to version 2.2.0
Advantech IoTSuite Starter Linux docker prior to version 2.2.0
Advantech IoT Edge Linux docker prior to version 2.2.0
Advantech IoT Edge Windows prior to version 2.2.0
Advantech WebAccess/SCADA prior to version 9.2.3
Advantech WebAccess SaaS-Composer prior to version 3.4.17.1
Advantech ECOWatch SaaS-Composer prior to version 3.4.17