Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AlanWeb SCADA is vulnerable to SQL Injection across most scripts and input parameters. Because no protections are in place, an authenticated attacker can inject arbitrary SQL commands, potentially gaining full control over the database. This issue was fixed in AlanWeb SCADA version 9.8.5
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-09 | 1 | Disclosure1 |
| 2026-04-10 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-34185 📊 Severity: 8.7 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-34185 #CVE-2026-34185 #CVE #High #CyberSecurity #InfoSec https://t.co/bSjxp1O5DE
Post summary
The tweet announces a new high‑severity CVE without providing exploit details, PoC, patch information, or evidence of active exploitation.
CVE-2026-34185 Hydrosystem Control System is vulnerable to SQL Injection across most scripts and input parameters. Because no protections are in place, an authenticated attacker can… https://www.cve.org/CVERecord?id=CVE-2026-34185
Post summary
The post discloses a SQL Injection vulnerability (CVE-2026-34185) affecting the Hydrosystem Control System, providing basic technical details but no exploits, patches, or evidence of active attacks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hydrosystem.poznan | control_system | - | - | - |