CVE-2026-78313

MediumCVSS 6.5/10Last modified Sep 24, 2026

Description

Improper Access Control in DIAEnergie.

This issue affects DIAEnergie: before 1.11.00.022.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Sep 24, 2026
Last modified
Sep 24, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-783148.8SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.CVE-2026-783158.8SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.CVE-2026-783168.8SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.CVE-2026-783178.8SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.CVE-2026-783186.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Syncope. The notification meCVE-2026-783199.3A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remoteCVE-2026-78327.0A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unknown part of the file ASC.exe of the component ServiCVE-2026-783216.0The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to CVE-2026-783226.5A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long pCVE-2026-783236.5A flaw was found in JSS (Java Security Services). The JSSTrustManager class does not verify NSS trust flags when validating CA certificates,CVE-2026-783256.9Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to exeCVE-2026-783279.1An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Securit
CVE-2026-78313: Medium severity, CVSS 6.5 | Vulnix