CVE-2026-6888

HighCVSS 7.2/10Last modified Oct 26, 2026

Description

Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the database.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
AdvantechSaaS Composerprior to version 3.4.17
AdvantechIoTSuite Growth Linux dockerprior to version 2.2.0
AdvantechIoTSuite Starter Linux dockerprior to version 2.2.0
AdvantechIoT Edge Linux dockerprior to version 2.2.0
AdvantechIoT Edge Windowsprior to version 2.2.0
AdvantechWebAccess/SCADAprior to version 9.2.3
AdvantechWebAccess SaaS-Composerprior to version 3.4.17.1
AdvantechECOWatch SaaS-Composerprior to version 3.4.17

References

Timeline

Published
May 13, 2026
Last modified
Oct 26, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-688808.0Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.CVE-2026-688815.5Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.CVE-2026-688838.5Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-688847.0Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-688857.8Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.CVE-2026-688865.5Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.CVE-2026-688877.5Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.CVE-2026-688887.8Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.CVE-2026-688897.1Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.CVE-2026-688907.8Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.CVE-2026-688914.7Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.CVE-2026-688927.8Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-6888: High severity, CVSS 7.2 | Vulnix