CVE-2026-78309

HighCVSS 8.8/10Last modified Oct 15, 2026

Description

SQL Injection vulnerability in DIAEnergie.

This issue affects DIAEnergie: before 1.11.00.022.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 24, 2026
Last modified
Oct 15, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-78317.6UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConneCVE-2026-783104.3Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.CVE-2026-783118.8SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.CVE-2026-783129.1Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.CVE-2026-783136.5Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.CVE-2026-783148.8SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.CVE-2026-783158.8SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.CVE-2026-783168.8SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.CVE-2026-783178.8SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.CVE-2026-783186.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Syncope. The notification meCVE-2026-783199.3A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remoteCVE-2026-78327.0A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unknown part of the file ASC.exe of the component Servi
CVE-2026-78309: High severity, CVSS 8.8 | Vulnix