← Database

CVE-2026-4901

MEDIUM CVSS: 6.5 Published: 2026-04-09 Modified: 2026-08-13

Description

AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthorized user. This issue was fixed in AlanWeb SCADA version 9.8.5

Affected Platforms

Hydrosystem.Poznan Control System

Weakness Type

CWE-532

References