Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-4901

Insertion of Sesitive Information into Log File in AlanWeb SCADA

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERT-PL

Description

AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthorized user. This issue was fixed in AlanWeb SCADA version 9.8.5

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Control System AlanWeb SCADA

Default version status: unaffected

  • 0 to < 9.8.5affected

References