SQL Injection Vulnerability in PROCON-WEB SCADA by PROCON
CVE-2026-16462

9.3CRITICAL

Key Information:

Vendor: Weidmueller Interface
Status: Procon-web Scada
Vendor: CVE Published:; 28 July 2026

🔔 Create Weidmueller Interface Vulnerability Alert

What is CVE-2026-16462?

An unprotected endpoint in PROCON-WEB SCADA allows unauthenticated remote attackers to execute arbitrary SQL commands through improper input sanitization. This vulnerability poses significant risks to the integrity and security of the system, enabling unauthorized access to sensitive data and potential manipulation of the underlying database.

Affected Version(s)

PROCON-WEB SCADA 1.0.0 <= 6.11.2

References

https://www.certvde.com/en/advisories/VDE-2026-085/

CVSS V4

Score:

9.3

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 28, 2026
Vulnerability Reserved
Jul 21, 2026

Credit

Marcel Fromkorth (8com)

CVE-2026-16462 Data

JSON