CVE-2026-41125

MediumCVSS 6.0/10Last modified Oct 13, 2026

Description

A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions), blueplanet gridsave 110 TL3-S (All versions < V3.92), blueplanet gridsave 137 TL3-S (All versions < V3.92), blueplanet gridsave 92.0 TL3-S (All versions < V3.92). Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Siemensblueplanet 100 NX3 M8< *
Siemensblueplanet 100 TL3 GEN2< *
Siemensblueplanet 105 TL3< V3.92
Siemensblueplanet 105 TL3 GEN2< *
Siemensblueplanet 110 TL3< V3.92
Siemensblueplanet 125 NX3 M10< *
Siemensblueplanet 125 TL3< V3.92
Siemensblueplanet 125 TL3 GEN2< *
Siemensblueplanet 137 TL3< V3.92
Siemensblueplanet 150 TL3< V3.92
Siemensblueplanet 150 TL3 GEN2< *
Siemensblueplanet 155 TL3< V3.92
Siemensblueplanet 155 TL3 GEN2< *
Siemensblueplanet 165 TL3< V3.92
Siemensblueplanet 165 TL3 GEN2< *
Siemensblueplanet 25.0 NX3-33.0 NX3—
Siemensblueplanet 3.0 NX3-20.0 NX3—
Siemensblueplanet 3.0-5.0 NX1—
Siemensblueplanet 360 NX3 M6—
Siemensblueplanet 50.0 NX3-60.0 NX3—
Siemensblueplanet 87.0 TL3< V3.92
Siemensblueplanet 87.0 TL3 GEN2< *
Siemensblueplanet 92.0 TL3< V3.92
Siemensblueplanet 92.0 TL3 GEN2< *
Siemensblueplanet gridsave 110 TL3-S< V3.92
Siemensblueplanet gridsave 137 TL3-S< V3.92
Siemensblueplanet gridsave 92.0 TL3-S< V3.92
Siemensblueplanet hybrid 10.0 TL3—
Siemensblueplanet hybrid 6.0 NH3-12.0 NH3—

References

Timeline

Published
May 12, 2026
Last modified
Oct 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-411264.3BigBlueButton is an open-source virtual classroom. Versions prior to 3.0.24 have an Open Redirect through bigbluebutton/api/join via get-parCVE-2026-411276.5BigBlueButton is an open-source virtual classroom. Versions prior to 3.0.24 have a missing authorization that allows viewers to inject/overwCVE-2026-411285.3Craft CMS is a content management system (CMS). In versions 5.6.0 through 5.9.14, the `actionSavePermissions()` endpoint allows a user with CVE-2026-411295.5Craft CMS is a content management system (CMS). Versions on the 4.x branch through 4.17.8 and the 5.x branch through 5.9.14 are vulnerable tCVE-2026-41137.2An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN usCVE-2026-411305.5Craft CMS is a content management system (CMS). In versions on the 4.x branch through 4.17.8 and the 5.x branch through 5.9.14, the `resourcCVE-2026-411315.0OpenFGA is an authorization/permission engine built for developers. Prior to version 1.14.1, in specific scenarios, models using conditions CVE-2026-411327.4CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTCVE-2026-411338.8pyLoad is a free and open-source download manager written in Python. Versions up to and including 0.5.0b3.dev97 cache `role` and `permissionCVE-2026-411347.8Kiota is an OpenAPI based HTTP Client code generator. Versions prior to 1.29.1 and 1.31.1 are affected by a code-generation literal injectioCVE-2026-411357.5free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. A memoCVE-2026-411365.3free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core