CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-16462 — In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This a...

·Source: NIST NVD

Updated:

Executive Summary

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.

Analysis

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands. CVSS Score: 9.8. Published: 2026-07-28T10:16:48.293.

Indicators of Compromise (1)

CVE (1)
CVE-2026-16462
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Former Citigroup CISO Blauner on What Makes A Great Security Leader

The cybersecurity pioneer discusses the evolution of the CISO role, AI's impact on careers, and why operational resilience is the profession's next frontier.

Dark Reading
MEDIUMVulnerabilityNEW

Standard Chartered names CTO for India and South Asia

UK bank Standard Chartered has bolstered its executive team in Asia after appointing Kavita Kulkami as chief technology and operations officer for India and South Asia

Finextra
HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-15025 — The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builde...

The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.3.2 via the automator_google_contacts_fetch_labels, automator_mautic_segment_fetch, automator_mautic_tags_fetch, and automator_mautic_render_contact_fields AJAX actions due to a missing capability check and missing nonce v

CVE-2026-15025
NIST NVD