Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-6888

SQL Injection Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CSA

Description

Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Advantech SaaS Composer

Default version status: unknown

  • prior to version 3.4.17affected

Advantech IoTSuite Growth Linux docker

Default version status: unknown

  • prior to version 2.2.0affected

Advantech IoTSuite Starter Linux docker

Default version status: unknown

  • prior to version 2.2.0affected

Advantech IoT Edge Linux docker

Default version status: unknown

  • prior to version 2.2.0affected

Advantech IoT Edge Windows

Default version status: unknown

  • prior to version 2.2.0affected

Advantech WebAccess/SCADA

Default version status: unknown

  • prior to version 9.2.3affected

Advantech WebAccess SaaS-Composer

Default version status: unknown

  • prior to version 3.4.17.1affected

Advantech ECOWatch SaaS-Composer

Default version status: unknown

  • prior to version 3.4.17affected

References