CVE-2026-16462Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.certvde.com/en/advisories/VDE-2026-085/

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
7 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 4 signals
Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 3d ago at 2 mentions (2026-07-28); latest day: 1
7 total mentions across 4 days

Deep dive

Activity timeline7 mentions / 4d

Signal classification3 categories

Disclosure

342.9%

Patch

342.9%

General

114.3%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-28	2	Disclosure1Patch1
2026-08-03	2	Disclosure1Patch1
2026-09-11	2	General1Patch1
2026-09-13	1	Disclosure1

Full discourse7 posts

Daily CyberSecurity@Daily_CyberSec85d
Patch
CVE-2026-16462 is a critical SQL injection in Weidmueller PROCON-WEB SCADA, rated CVSS 9.8. An unauthenticated attacker can run SQL commands. Patch now. #PROCONWEB #Weidmueller #CVE202616462 #SQLInjection #SCADA #CyberSecurity http://securityonline.info/procon-web-scada-cve-2026-16462/
Post summary
A critical SQL injection (CVE‑2026‑16462) in Weidmueller PROCON‑WEB SCADA, rated CVSS 9.8, has been disclosed and a patch is available; no active exploitation or PoC details are provided.
03030465
13.0K followersView on X
kokumօtօ@__kokumoto85d
Disclosure
ワイドミュラーPROCON-WEB SCADAに重大(Critical)な脆弱性。CVE-2026-16462はCVSSスコア9.8のSQLインジェクション。バージョン1.0.0から6.11.2までの多岐に渡る機種に影響。6.11.3で修正。緩和策なし。 https://securityonline.info/procon-web-scada-cve-2026-16462/
Post summary
The text announces a critical SQL injection vulnerability (CVE-2026-16462) affecting many PROCON‑WEB SCADA versions, with a high CVSS score, and notes it is fixed in version 6.11.3, with no mitigation available.
00011656
7.6K followersView on X
Orizon@OrizonCyber91d
Patch
🚨 CVE-2026-16462 — CVSS 9.8/10 ██████████ In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/mTboRRmGaD
Post summary
The tweet announces a critical vulnerability (CVE‑2026‑16462) in PROCON‑WEB SCADA that allows remote unauthenticated exploitation via an unsanitized API endpoint and urges readers to apply the available patch.
1001052
69 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker45d
General
【重大】SCADA脆弱性CVE-2026-16462、今すぐ確認したい3つの対策 https://www.cybernote.click/2026/09/07/procon-web-scada-cve-2026-16462/ #IT #Security #cybersecurity
Post summary
The post highlights a critical SCADA vulnerability (CVE‑2026‑16462) and mentions three countermeasures, but offers no technical specifics, proof of concept, or evidence of active exploitation.
0001066
204 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker44d
Disclosure
【重大】SCADA脆弱性CVE-2026-16462、今すぐ確認したい3つの対策 https://www.cybernote.click/2026/09/07/procon-web-scada-cve-2026-16462/ #IT #Security #cybersecurity
Post summary
The post announces the SCADA vulnerability CVE-2026-16462 and urges readers to review three immediate countermeasures, but it does not provide technical, exploit, or patch details.
0000041
204 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker46d
Patch
【重大】SCADA脆弱性CVE-2026-16462、今すぐ確認したい3つの対策 https://www.cybernote.click/2026/09/07/procon-web-scada-cve-2026-16462/ #IT #Security #cybersecurity
Post summary
The post announces a critical SCADA vulnerability (CVE‑2026‑16462) and highlights three mitigation steps, focusing on patch or workaround recommendations.
0000047
204 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds90d
Disclosure
CVE-2026-16462 Unauthenticated SQL Injection in PROCON-WEB SCADA GetGridData Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-16462
Post summary
The post announces a newly disclosed unauthenticated SQL injection vulnerability (CVE-2026-16462) affecting the PROCON‑WEB SCADA GetGridData endpoint.
0000085
4.1K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-16462

kokumօtօ[verified]@__kokumotoDisclosure

The text announces a critical SQL injection vulnerability (CVE-2026-16462) affecting many PROCON‑WEB SCADA versions, with a high CVSS score, and notes it is fixed in version 6.11.3, with no mitigation available.

Orizon[verified]@OrizonCyberPatch

The tweet announces a critical vulnerability (CVE‑2026‑16462) in PROCON‑WEB SCADA that allows remote unauthenticated exploitation via an unsanitized API endpoint and urges readers to apply the available patch.

Daily CyberSecurity@Daily_CyberSecPatch

A critical SQL injection (CVE‑2026‑16462) in Weidmueller PROCON‑WEB SCADA, rated CVSS 9.8, has been disclosed and a patch is available; no active exploitation or PoC details are provided.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerGeneral

The post highlights a critical SCADA vulnerability (CVE‑2026‑16462) and mentions three countermeasures, but offers no technical specifics, proof of concept, or evidence of active exploitation.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The post announces the SCADA vulnerability CVE-2026-16462 and urges readers to review three immediate countermeasures, but it does not provide technical, exploit, or patch details.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerPatch

The post announces a critical SCADA vulnerability (CVE‑2026‑16462) and highlights three mitigation steps, focusing on patch or workaround recommendations.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces a newly disclosed unauthenticated SQL injection vulnerability (CVE-2026-16462) affecting the PROCON‑WEB SCADA GetGridData endpoint.