{"id":"CVE-2026-115803","kind":"vulnerability","aliases":["CVE-2026-115803"],"related":[],"title":"Scada-LTS: AmCharts Data API lets remote users bypass authorization checks","description":"A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChartValuesAPI.java of the component AmCharts Data API. Executing a manipulation of the argument ids can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. The vendor announces: \"At this moment we are working on new release with security enhancements which will be introduced to the community soon.\"","summary":"Scada-LTS 2.8.0 has an authorization bypass in its AmCharts Data API, where manipulating the ids parameter in AmChartValuesAPI.java lets a remote request read data it should not reach. The exploit is published, so an unauthenticated or low-privilege attacker could pull chart values from the SCADA system.","severity":"medium","cvss":4.3,"epss":0.00374,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["industrial-control","package","scada-lts","self-hosted"],"not_affected_if":["isolated-network"],"how_to_check":"- Check the installed Scada-LTS version; `2.8.0` is the affected release per the advisory\n- Confirm whether the AmCharts data endpoint in AmChartValuesAPI is reachable from outside the network\n- unknown whether authentication is required to reach the vulnerable endpoint","fix":"- No fixed version named in the sources; the vendor says a release with security enhancements is in progress\n- Restrict network access to the Scada-LTS web interface until a patched release ships\n- unknown whether a configuration change alone removes the flaw","status":"open","published_at":"2026-10-24T07:16:46+00:00","first_seen_at":"2026-10-24T08:17:08+00:00","triaged_at":"2026-10-25T04:37:14+00:00","updated_at":"2026-10-25T12:38:49+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T04:37:14Z","model":"claude-haiku-5-5","output":{"fix":"- No fixed version named in the sources; the vendor says a release with security enhancements is in progress\n- Restrict network access to the Scada-LTS web interface until a patched release ships\n- unknown whether a configuration change alone removes the flaw","reach":"internet","title":"Scada-LTS: AmCharts Data API lets remote users bypass authorization checks","impact":"medium","summary":"Scada-LTS 2.8.0 has an authorization bypass in its AmCharts Data API, where manipulating the ids parameter in AmChartValuesAPI.java lets a remote request read data it should not reach. The exploit is published, so an unauthenticated or low-privilege attacker could pull chart values from the SCADA system.","category":"package","nicknames":[],"who_cares":["scada-lts","self-hosted","industrial-control"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Remote attacker reads chart data without the authorization it should require","analyst_note":"Check the NVD entry and the Scada-LTS repository for a patched release and whether login is required for the AmCharts endpoint.","how_to_check":"- Check the installed Scada-LTS version; `2.8.0` is the affected release per the advisory\n- Confirm whether the AmCharts data endpoint in AmChartValuesAPI is reachable from outside the network\n- unknown whether authentication is required to reach the vulnerable endpoint","needs_analyst":true,"not_affected_if":["isolated-network"],"who_is_affected":"Teams running Scada-LTS 2.8.0 with its web interface reachable over the network, including remote access. Installations kept on an isolated network with no external path to the web UI are less exposed. unknown whether the sources name a specific configuration that makes the flaw reachable.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000659,"input_tokens":3360,"output_tokens":646,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115803':15A,18A '-2026':14A,17A '2.8.0':32B,88C 'affect':89C 'amchart':4A,39B,104C 'amchartvaluesapi.java':48B,100C 'announc':136C 'api':6A,41B,106C 'argument':112C 'attack':70B,120C 'author':11A,35B,117C 'bypass':10A,36B,118C 'chart':73B 'check':12A 'communiti':155C 'compon':103C 'control':21B 'could':71B 'cve':13A,16A 'data':5A,40B,54B,105C 'enhanc':148C 'execut':107C,123C 'exploit':60B,126C 'file':99C 'flaw':80C 'found':83C 'function':95C 'host':28B 'httpservletrequest.getparameter':96C 'id':45B,113C 'industri':20B 'industrial-control':19B 'introduc':152C 'lead':115C 'let':7A,49B 'low':68B 'low-privileg':67B 'lts':3A,25B,31B,87C 'manipul':43B,109C 'may':131C 'moment':139C 'new':144C 'packag':22B 'paramet':46B 'privileg':69B 'publish':62B,129C 'pull':72B 'reach':58B 'read':53B 'releas':145C 'remot':8A,51B,124C 'request':52B 'scada':2A,24B,30B,77B,86C 'scada-lt':1A,23B,29B,85C 'secur':147C 'self':27B 'self-host':26B 'soon':156C 'system':78B 'unauthent':65B 'use':133C 'user':9A 'valu':74B 'vendor':135C 'vulner':92C 'work':142C","nicknames":[],"mitigations":[],"who_affected":"Teams running Scada-LTS 2.8.0 with its web interface reachable over the network, including remote access. Installations kept on an isolated network with no external path to the web UI are less exposed. unknown whether the sources name a specific configuration that makes the flaw reachable.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-24T07:16:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115803","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115803","severity":null,"published_at":"2026-10-24T07:16:46+00:00","modified_at":"2026-10-24T07:16:46+00:00","first_seen_at":"2026-10-24T08:17:08+00:00","fetched_at":"2026-10-24T08:17:08+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115803","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115803","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:49+00:00","fetched_at":"2026-10-25T12:38:49+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}