Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

DIAEnergie allows attackers to run unauthorized database commands

CVE-2026-78309 · published 1 month ago
Summary

Versions of DIAEnergie older than 1.11.00.022 let a malicious user send special input that can change or view the program’s stored data. This could lead to data being stolen, modified, or deleted. Update the software to the latest version as soon as possible to close the gap.

What to do
  • Update deltaww diaenergie to version 1.11.00.022 or later.
Affected software
VendorProductAffected versions
deltaww diaenergie < 1.11.00.022
Original advisory text
SQL Injection in DIAEnergie
SQL Injection vulnerability in DIAEnergie.

This issue affects DIAEnergie: before 1.11.00.022.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published24 Sep 2026
Updated4 Nov 2026
First seen24 Sep 2026
Sources
CVE-2026-78309 · NVD
CVE-2026-78309 · MITRE
Track software like this
Free during beta