Vulnerability intelligence

CVE-2026-16462

Weidmueller Interface PROCON-WEB SCADA CWE-89

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.5%

Riskier than 40% of all CVEs · checked 2026-09-16

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Aug 3, 2026 · latest Aug 3, 2026

Coverage timeline

Critical SQLi Bug in Weidmüller PROCONWEB SCADA Threatens OT
securityonline.info · Aug 3, 2026

Related CVEs — Weidmueller Interface

CVE-2026-63586 CVE-2026-63587