Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious users that use the vulnerable endpoint are potentially able to cause remote code execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-24 | 1 | Disclosure1 |
| 2026-02-25 | 5 | Disclosure4Patch1 |
CVE-2026-21410 InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious users that use the vulnerable endpoint are potentially able to caus… https://www.cve.org/CVERecord?id=CVE-2026-21410
Post summary
CVE-2026-21410 exposes a SQL injection flaw in InSAT MasterSCADA BUK-TS’s main web interface, potentially allowing malicious users to exploit the system.
[CRITICAL] CVE-2026-21410: Critical SQL Injection in InSAT MasterSCADA BUK-TS CVE-2026-21410 allows SQL injection in InSAT MasterSCADA BUK-TS, potentially leading to remote code execution. CVE: CVE-2026-21410 • APT: U… https://www.thehackerwire.com/vulnerability/CVE-2026-21410/
Post summary
A critical SQL injection vulnerability (CVE-2026-21410) in InSAT MasterSCADA BUK-TS is disclosed, potentially enabling remote code execution.
24/02/2026 🚨 Critical vulnerabilities in InSAT MasterSCADA BUK-TS could allow remote code execution via SQL and OS command injection (CVE-2026-21410, CVE-2026-22553). Affected users must take immediate action to mitigate risks. https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-01
Post summary
The advisory announces two critical CVEs in InSAT MasterSCADA BUK‑TS that enable remote code execution via SQL and OS command injection, urging users to act promptly.
CVE-2026-21410 SQL Injection in InSAT MasterSCADA BUK-TS Enabling Remote Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21410
Post summary
The post announces a SQL injection vulnerability (CVE-2026-21410) in InSAT MasterSCADA BUK-TS that can lead to remote code execution, with no PoC, exploit, or patch details provided.
🚨 CRITICAL: All InSAT MasterSCADA BUK-TS versions vulnerable to unauthenticated SQL Injection (CVSS 9.8). Remote code execution & OT risk! Restrict access now, patch ASAP. https://radar.offseq.com/threat/cve-2026-21410-cwe-89-in-insat-masterscada-buk-ts-10cd43d6 #OffSeq #ICS #... https://t.co/fof4zuMfDn
Post summary
The tweet announces a critical unauthenticated SQL injection vulnerability in InSAT MasterSCADA BUK-TS, urging immediate patching to mitigate remote code execution risk.
**CVE ID:** CVE-2026-21410 **Product:** InSAT MasterSCADA BUK-TS **Vulnerability Type:** SQL Injection leading to Remote Code Execution (RCE) **Severity:** Critical (CVSS 3.1 Score: 9.8) **Attack Vector:** Network **Privileges Required:** None **User Interaction:** None **Scope:** Unchanged **Impact:** High on Confidentiality, Integrity, and Availability #Cybersecurity #CVE #CriticalCVE #CriticalVulnerability #RemoteCodeExecution #SQLInjection https://cvetodo.com/cve/CVE-2026-21410
Post summary
The post announces a critical SQL injection vulnerability (CVE‑2026‑21410) in InSAT MasterSCADA BUK‑TS that can lead to remote code execution, but provides no proof‑of‑concept, exploit code, active exploitation evidence, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | insat | masterscada | - | - | - |