CVE-2026-4901 — Insertion of Sesitive Information into Log File in AlanWeb SCADA
AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Com…
Published: 2026-04-09 · CVSS: 6.9 · CVSS 4.0
AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthorized user. This issue was fixed in AlanWeb SCADA version 9.8.5
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7