| CVE ID | CVSS Score | Severity | Description |
|---|---|---|---|
| CVE-2026-89204 | 5.4 | medium |
CVE-2026-89204. Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.
|
| CVE-2026-89197 | 8.8 | high |
CVE-2026-89197. Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.
|
| CVE-2026-89198 | 8.8 | high |
CVE-2026-89198. Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.
|
| CVE-2026-89200 | 6.7 | medium |
CVE-2026-89200. Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.
|
| CVE-2026-89199 | 8.8 | high |
CVE-2026-89199. Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.
|
| CVE-2026-89196 | 8.8 | high |
CVE-2026-89196. Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.
|
| CVE-2026-89201 | 7.5 | high |
CVE-2026-89201. Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.
|
| CVE-2026-89206 | 6.3 | medium |
CVE-2026-89206. Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.
|
| CVE-2026-89203 | 4.3 | medium |
CVE-2026-89203. Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.
|
| CVE-2026-89205 | 6.3 | medium |
CVE-2026-89205. Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.
|
| CVE-2026-89202 | 6.5 | medium |
CVE-2026-89202. Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.
|