Live › vulnerability › CVE-2026-115803
Go to dashboardScada-LTS 2.8.0 has an authorization bypass in its AmCharts Data API, where manipulating the ids parameter in AmChartValuesAPI.java lets a remote request read data it should not reach. The exploit is published, so an unauthenticated or low-privilege attacker could pull chart values from the SCADA system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-24 08:17 UTC. All times on this page are UTC.
Teams running Scada-LTS 2.8.0 with its web interface reachable over the network, including remote access. Installations kept on an isolated network with no external path to the web UI are less exposed. unknown whether the sources name a specific configuration that makes the flaw reachable.
No product ranges from the sources yet.
2.8.0 is the affected release per the advisoryEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChartValuesAPI.java of the component AmCharts Data API. Executing a manipulation of the argument ids can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. The vendor announces: "At this moment we are working on new release with security enhancements which will be introduced to the community soon."
This page as .md · .json · in your agent: get_signal("CVE-2026-115803")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.