Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database. This issue was fixed in AlanWeb SCADA version 9.8.5
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-09 | 1 | Disclosure1 |
| 2026-04-10 | 1 | General1 |
CVE-2026-34184 Hydrosystem Control System does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even e… https://www.cve.org/CVERecord?id=CVE-2026-34184
Post summary
The entry announces that CVE‑2026‑34184 exposes read‑access in Hydrosystem Control System by failing to enforce authorization for certain directories.
⚡ New CVE Alert: CVE-2026-34184 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-34184 #CVE-2026-34184 #CVE #High #CyberSecurity #InfoSec https://t.co/EyyhoimX0B
Post summary
The post is a brief announcement of a new CVE with severity rating but no additional technical or exploit information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hydrosystem.poznan | control_system | - | - | - |