Authorization Bypass Vulnerability in Scada-LTS 2.8.0 by Scada-LTS
CVE-2026-115803

5.3MEDIUM

Key Information:

Vendor

Scada-LTS

Status
Scada-lts
Vendor
CVE Published:
24 October 2026

What is CVE-2026-115803?

A vulnerability exists in Scada-LTS version 2.8.0 that affects the AmCharts Data API. Specifically, the function HttpServletRequest.getParameter in the file AmChartValuesAPI.java allows for an authorization bypass through manipulation of the 'ids' argument. This flaw can be exploited remotely, potentially allowing unauthorized access to sensitive data or operations. The vendor is currently working on a security update to address this issue and enhance overall protection.

Affected Version(s)

Scada-LTS 2.8.0

References

https://vuldb.com/vuln/425987
vdb-entrytechnical-description
https://vuldb.com/vuln/425987/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-115803
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LianAldrich (VulDB User)
VulDB CNA Team
.